curl-ca-bundle: add caveats