added initial RLS enabled GUC. -- does not include plancache invalidation.