Now that we've dropped python 3.3 (so create_default_context is present on all supported versions), we can drop all ssl backwards-compatibility and require the modern feature set.