put back --trust-server-cert and try escaping the colon