Nobody objected, so let's hold out until libcurl breaks us for good or OpenSSL 1.1 support emerges...