curl: make ca-bundle optional