workaround httplib2's tendency to use its own CA file instead of OS level CA material