Specify `cacert=/etc/ssl/certs/ca-certificates.crt` in `/home/$NB_USER/.curlrc` so curl can locate the certificates.