CanonicalQuery::nss() returns the NSS as a value when it could return a const ref. This function is used all over query optimization code so let's change it to avoid unnecessary copies.