mysql: Only set certificate specs if TLS everywhere is enabled