cmake: move Darwin-specific block around This allows us to only link against CoreFoundation when using the SecureTransport backend