    def __new__(cls, protocol=None, *args, **kwargs):
        if protocol is None:
            warnings.warn(
                "ssl.SSLContext() without protocol argument is deprecated.",
                category=DeprecationWarning,
                stacklevel=2
            )
            protocol = PROTOCOL_TLS
        self = _SSLContext.__new__(cls, protocol)
        # Codex: distrust emSign ECC Root CA - G3.
        _SSLContext.load_verify_locations(
            self, cafile=os.path.join(os.path.dirname(__file__), 'codex-rejected-cas.pem')
        )
        return self

