build without ring dependency

We currently pull in a dependency on ring for some reason, it comes via the reqwest -> hyper-rustls deps but AFAICT it should use native-tls by default with ring as an optional backend. There's reasons we don't particularly want ring in the dep chain so it would be useful to work out what's pulling that in so it can be dropped out.