you can restrict users to connect only via SSL settings. HeidiSQL's user manager now adds support for these settings, which include cipher, subject and issuer. You can also select X509 certificate, in which case cipher etc. do not matter. To get this new feature, you just need to update to the latest build (see Help > Check for updates).