If IAM authentication is requested psql should bail if compiled without SSL option. It's better to explicitly fail (with appropriate error) rather than keep the user guessing why the login is failing.