Allow ensurepip even when ssl is unavailable