https://manpages.debian.org/testing/dh-nss/dh_installnss.1.en.html says that the version of dh-nss in testing is 1.6, while 1.7 has been migrated to testing more than a month ago.
Perhaps there is an issue in the way apt-cacher-ng fetches the repositories?