if no token name is provided to PK11_FindCertByNickname, default to internal token (as opposed to the entire trust domain)
if no token name is provided to PK11_FindCertByNickname, default to internal token (as opposed to the entire trust domain)

thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss,thespooler/nss