nss is not using %make_build, which is the recommended macro these days.
One of the more tangible benefits of using it is that it automatically supplies the -j parallelism option,
but then the serial test execution dwarfs the actual build time, sadly, unless --nocheck is being used. Anyway, I think it's still worth fixing at least in 10.