Upcoming versions of pip are going to get more and more nasty about
non-SSL index locations. In order to deal with that well, add a global
config file listing our PyPI mirrors as "trusted" - which means
that pip will not complain about their non-SSL qualities.
Change-Id: If9f3cec10d8057631978f7f1d5cd7e4936e163ef