the ebuilds of dev-libs/nss are using sed inside of src_unpack() but dont depend on sys-apps/sed. this should be easy to fix.
sed is in system, so it's not needed in DEPEND.