Full nss_nonlocal documentation is at http://debathena.mit.edu/nss_nonlocal/

tl;dr nss_nonlocal ensures that NSS sources not on your machine ("non local", e.g. Hesiod) don't take precedence over local ones.