fixup also add a mention in libcurl-security.3