first pass of postgres hardening requirement tests

Should we document this approach in Readme?