set a secure search path and revoke create on public