use postgresql cookbook
rely on openssl to generate a random password