only allow root to connect to db as root

We were letting anyone locally connect as anyone.
Now we only let someone connect as the particular user

also make configuration easier to manipulate, since it now comments out unused rules instead of removing them