This forces curl to use nix bundled crt instead of picking one up from system. Fixes: 142c77711 ('Propagate path of CA bundle to curl child processes')
142c77711