This stupidly just strips any ?sslmode= arguments from the postgres URI and enables SSL without verification regardless of which mode the user specifies.