Use a common TLS config
Add comment and link regarding Postgres TLS negotiation