Maybe a lame enum like we did with _CipherContext would be better?

https://github.com/pyca/cryptography/blob/master/cryptography/hazmat/backends/openssl/backend.py#L604