Go ahead and do your carolling. If someone busts you on performing rights, go to the media - newspapers, Facebook, radio -- make sure it gets known what the nonprofit is that you are collecting for. I doubt very much that anyone will make a fuss. If you want to really be sure, just do the age-old songs that are in the public domain.