nss is not in tail_build because of moz, so expat, external, openssl and
python3 must go also out.

Change-Id: I52a3b02ff477ae52abc298d96770755ebc392d57