assume user is superuser and local socket connections use ident, which is the documented default