Apply a name constraint to an NSS certificate database for all CKBI (built-in) trust anchors, without those trust anchors' consent. - View it on GitHub