ignoring 'options' when doing connection reuse

libcurl contains a significant logic flaw in its connection pool matching mechanism. When a transfer specifies a required authentication policy—such as a specific SASL mechanism (e.g., `;AUTH=GSSAPI`) or a restricted set of SSH authentication types (`CURLOPT_SSH_AUTH_TYPES`)—libcurl fails to verify …

static bool url_match_auth(struct connectdata *conn, struct url_conn_match *m) {
  if(!(m->needle->scheme->flags & PROTOPT_CREDSPERREQUEST)) {
    if(Curl_timestrcmp(m->needle->user, conn->user) ||
       Curl_timestrcmp(m->needle->passwd, conn->passwd) || …