Equivalent of PgBouncer client_tls_sslmode configuration

[psiniemi]

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

I want to avoid the situation where a configuration error sends sensitive data in cleartext over the network. Instead, cleartext communication should be rejected.

Describe the solution you'd like
A clear and concise description of what you want to happen.

I would like a configuration option like the client_tls_sslmode in PgBouncer that I can set to "require" to achieve what I want.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

I could do SSL offloading in front of PgCat, but that adds unnecessary complexity.

Additional context
Add any other context or screenshots about the feature request here.