In the postgres binary, allow supplying a certificate store against which to verify the server cert

[djmitche]

From #138, sometimes postgres servers are using a non-default CA. Let's give users an option to handle that situation.