geo-postgresql has ssl enabled by default with no certificates

Per !2101 (comment 50718913)

In !2101 (merged) we changed the default of postgresql['ssl'] to be "on". This seems to have filtered into the geo_postgresql recipes somehow.