There is the cstore foreign data wrapper, https://github.com/citusdata/cstore_fdw, but it is still an extension. Hopefully it will go into mainline at some point.

In TLSv1.3 the privacy issue is fixed. The client certificate is sent encrypted. And also, the client certificate doesn't have to be sent in the beginning of the session.