Enabling enhanced certificates adds extra parameters to the database URL:
?sslrootcert=/etc/ssl/certs/ca-certificates.crt&sslmode=verify-full
The following error is raised as pgbouncer is then expected to have SSL configured based on the parameters passed:
connection to server at "127.0.0.1", port 6000 failed: server does not support SSL, but SSL was required