Open-source dependency security

libcurl handed an mTLS-authenticated connection to a handle carrying a different private key

The five options that decide which private key opens a client certificate lived in a struct libcurl's connection-reuse check never reads, so two handles sharing a pool could share one authenticated connection. Commit 7541ae5 moves them.