That said, we don't have full context (pun intended) -- it is entirely possible that ExitStack is not the original or has somehow been modified to, for instance, skip exiting contexts for non-SSL server connections and do Something with them... but I think that's overly paranoid.