Run pgbouncer and stunnel in a Heroku dyno, managed by runit