support dsn flag: sslmode