_enforce_https is currently a staticmethod on _BearerTokenCredentialPolicyBase, but AsyncBearerTokenCredentialPolicy does not inherit from that base class. As a result, the async policy accesses it awkwardly via a cross-class protected member call. Let's make this a module-level method instead.