curl: switch default SSL to mbedTLS