So existing binaries will keep working?

Not necessarily if you go back far enough to have nss problems :)