Hardening Postgres setup