require xmlsec1-nss >= 1.2.35