(PUP-3346) Don't allow insecure SSL connections w/curl

The appdmg and pkgdmg providers were calling curl with -k (—-insecure)
which allows curl'ing over insecure HTTPS connections. I can't see why
this would ever be desired, and connections often fail attempting
to establish a connection.

This commit removes the insecure option.