The standalone SQL client binary does not currently support --certs-dir, meaning you have to use --url to pass an unwield postgresql-type URL rather than being able to simply run the binary (and it finding .cockroach-certs/ by default or whatever is passed by --certs-dir).
Jira issue: CRDB-16106