feat(curl.sh): report errors, remove insecure flag