This reduces log spam and lets us remove an old (and timing-sensitive) test workaround. Closes #1362.
Use the system certificates instead of certifi when available. Note that this does not change the behavior of simple_httpclient, which always uses certifi but will be changing in a future commit.
It is inexplicably failing on py27 DEPS=false while passing in other configurations.