Make "fast and loose" behavior opt-in

* Add support for a `settings.TENANT_SCHEMAS_PARANOID` variable;
  if false, limit calls to `set search_path`