Don't allow insecure SSL connections

The `appdmg_eula` provider was calling `curl` with `-k` which allows curl'ing over insecure HTTPS connections. I can't see why this would ever be desired, and one package (boxen/puppet-gpgtools) would often fail when attempting to download an .dmg from their server.

This PR removes the insecure option.