Use 3.4's ssl.create_default_context when available

Related #472 
Should this have #489's behaviour?