Only allow created user to connect to template1 via md5 in postgresql::user