So this adds "LOGIN CREATEDB SUPERUSER".  Are all three strictly needed in order to fix the RI problem?