Use NSS_STATUS_TRYAGAIN to indicate insufficient buffer (BZ #16878)