cURL: install ca-bundle.crt, too