In PyMongo cert_reqs=None and cert_reqs=ssl.CERT_REQUIRED are identical. When doing KMS lookups for CSFLE we create a SSLContext which performs cert verification, hostname verification and enables SNI. Using cert_reqs=None is secure but it is a little confusing.

We should instead use cert_reqs=ssl.CERT_REQUIRED for clarity.