[NSM] Sort security settings before writing to external file

This should avoid updates of the private submodule just due to reordering
existing entries in ‘nsm-settings-file’.

init.el

@@ -694,8 +694,18 @@ _h_   _l_   _o_k        _y_ank
 
 (use-package nsm
   :defer t
-  :config (setq network-security-level 'high
-                nsm-save-host-names t))
+  :config (progn
+            (setq network-security-level 'high
+                  nsm-save-host-names t)
+
+            (defun db/sort-nsm-permanent-settings ()
+              (setq nsm-permanent-host-settings
+                    (cl-sort nsm-permanent-host-settings
+                             #'string<
+                             :key #'second)))
+
+            (advice-add 'nsm-write-settings
+                        :before #'db/sort-nsm-permanent-settings)))
 
 (use-package gnutls
   :defer t

private

@@ -1 +1 @@
-Subproject commit 48138eed53d3f06808ae63074276a7126d55a965
+Subproject commit 3775c567d13e49ca8605126003ac8847760e19e0