Comment 5 for bug 1744328

I followed the suggestion to take a look at Fedora, and it really is public there.

$ dnf repoquery --installed -l nss-softokn-freebl nss-softokn | grep '.so$'
/usr/lib64/libfreebl3.so
/usr/lib64/libfreeblpriv3.so
/usr/lib64/libnssdbm3.so
/usr/lib64/libsoftokn3.so

The only special one is /usr/lib64/libnssckbi.so which goes via in indirection through /etc/alternatives as it can be provided by p11-kit-trust

There might have been history in Debian we don't know of.
Create a suggested fix - for now only for freebl3, not the others - to move them to an accessible path and suggest to Debian.