Make `insecure` option work with curl AND git. (#1786)

bin/spack

lib/spack/spack/__init__.py

lib/spack/spack/fetch_strategy.py

lib/spack/spack/util/executable.py

var/spack/repos/builtin/packages/jdk/package.py