happened when a user had a home dir as an empty string. curl would then do
free() on a wrong area.