I'm a bit hesitant to set the default to `VERIFY_NONE`.

Could we instead have an attribute for `verify_mode` that defaults to `VERIFY_PEER` and add an additional attribute for providing the path to the `ca_file`? Your test environment could then use that attribute to set the `verify_mode` to none.