If the ssl import is actually in a submodule, you may need to list additional subpackages in the "fresh" parameter.

If you're wondering why this isn't in the importlib API - it's because it can go wrong in an impressively large number of ways, and we don't have any hope of documenting it well enough to make it usable by anyone that either: a) couldn't write it themselves; or b) isn't getting coached by someone that could write it themselves.

But when you know what you're doing and the modules involved don't break horribly when treated this way, it's a very neat trick for testing purposes.