Why not `if getattr(self, '_tunnel_host', None): ...`?

Alternatively, could add `_tunnel_host = None` to our `VerifiedHTTPSConnection`. Kinda +0 on the first one, though could be convinced either way.