Quick note for myself on how to quickly get a curl with ECH support:

(curl.override {
  rustlsSupport = true;
  opensslSupport = false;
  http3Support = false;
}).overrideAttrs (final: prev: {
  configureFlags = prev.configureFlags ++ [ "--enable-ech" ];
})