stream_curl: tell libcurl to use the native CA store

This is independent of other CA certificate locations set at run time or
build time. Those locations are searched in addition to the native CA
store.