Use curl --insecure when bootstraping OPAM

This should fix #408