Could we possibly have the system test create a postgres user account, add or deny privileges to that user using the new pg_hba_rule stuff, and then attempt to connect via psql -h?  This test is good--it confirms that we're writing something to the correct file--but it doesn't actually validate the syntax of the data we're writing.