remote-curl: tighten "version 2" check for smart-http