PgBouncer TLS endpoint