How I leaked curl security information and had to release curl sooner