curl: add a version of curl which knows where to find ca-bundle.crt