SSL to individual database
Connection settings, including encryption, are instance level. Since connections can switch databases at any moment (simply issue an USE statement) it makes no sense at all to have such settings at database level.

Security constrains ('all traffic to and from this DB must be encrypted') often result in splinting the DB into its own instance just to satisfy the constraint.