zshrc: drop insecure options from curl/wget cmdlines in simple-extract()