Add a call to crypto::EnsureNSSInit() in TrustStoreNSS.

This matches TrustStoreNSS::SyncGetIssuersOf() which also calls it.

(In practice GetTrust() is called first now)

Change-Id: Ieed6a2083dc390d255ca7484acaa656b01dbaadc
Reviewed-on: https://chromium-review.googlesource.com/593091Reviewed-by: Matt Mueller <mattm@chromium.org>
Commit-Queue: Eric Roman <eroman@chromium.org>
Cr-Commit-Position: refs/heads/master@{#491033}

net/cert/internal/trust_store_nss.cc

@@ -66,6 +66,8 @@ void TrustStoreNSS::SyncGetIssuersOf(const ParsedCertificate* cert,
 
 void TrustStoreNSS::GetTrust(const scoped_refptr<ParsedCertificate>& cert,
                              CertificateTrust* out_trust) const {
+  crypto::EnsureNSSInit();
+
   // TODO(eroman): Inefficient -- path building will convert between
   // CERTCertificate and ParsedCertificate representations multiple times
   // (when getting the issuers, and again here).