Add backports.ssl_match_hostname dependency in place of our copy.

This function has changed recently and it makes more sense to stop
maintaining a separate copy, even though it does introduce our first
required dependency.