more secure settings for curl