A quick reminder. This is what we do to keep curl secure. We try.
@bagder curl and sqlite are in my very very very short list of FOSS codebases who "Do It Right"