When creating the engine, tell it to use encryption:

engine = create_db_engine(db_url, 
   connect_args={"sslmode": "require"})