Add sslmode=prefer option

Unfortunately, we have no existing tests for sslmode and without
something like https://github.com/kr/pgtest there's no easy way
to sensibly test this. For now, verified locally.