Function message_indicates_tls_refused 

fn message_indicates_tls_refused(err: &Error) -> bool

Heuristic: does the error look like “server said no to our TLS request”?

tokio_postgres surfaces this as an io error or a “server does not support TLS” message depending on version. We string-match the Display form because the typed variants are not all public.