Add a new unprivileged database user (fxa) and use it for the server

Sounds good.