mark curl as dependency as long client uses it