ignore ssl cert for curl in bootstrap

fixes #182
add install via "go get -d"
no-op change to un-confuse race detector (unless the race is real)

maybe fixes #201
Merge pull request #202 from tschottdorf/vndr

minor fixes