pg_hba: validate target (mandatory)