Description of problem:

nss rpm depends on /usr/bin/update-crypto-policies, provided by
crypto-policies-scripts, which is ultimately a Python script, depending
in turn on platform-python and transitively on half-dozen other Python
pieces.

This is a problem for other language runtimes using nss. OpenJDK necessarily
depends upon nss as part of FIPS support, and so Red Hat's OpenJDK RPMs pull
in Python, and Red Hat's OpenJDK container images contain Python. We want to
avoid this.

Version-Release number of selected component (if applicable):

Version : 3.71.0
Release : 7.el9