Use 3.4's ssl.create_default_context when available

Related #472 
That works for me, I'd even be okay with catching (IOError, OSError) with a similar comment explaining why.