curl: When curl uses Schannel as TLS backend, it fails to enforce TLS 1.3 cipher suite selections correctly