Only force cURL protocols if we actually can

This doesn't have any security ramifications, as it's only a double-check on top
of our existing checking. Fixes #69