pgbouncer TLS cert host - not a real endpoint