(PUP-3346) Don't allow insecure SSL connections w/curl

The appdmg and pkgdmg providers were calling curl with -k (—-insecure) 
which allows curl'ing over insecure HTTPS connections. I can't see why 
this would ever be desired, and connections often fail when attempting
to establish a connection.

This removes the insecure option.