Force satellite hosts that only speak to relayhost to have a
smtp_tls_security_level of 'encrypt', so it is not optional (#1902)

Change-Id: I61ad0823e3eb8df6c224767d63f0911dcba42a16