curl: use the system certificates