To turn insanity::pkix on in Nightly, we need to:
# Land the OCSP cache: {{Bug|915932}} (:keeler, :cviecco)
# Add low-level OCSP unit tests: {{Bug|916629}} (:briansmith, :st3fan)
# Test that results from the certificate database are interpreted correctly: {{Bug|966820}} (:cviecco)