have the template, since it was hard coded to best practices (which we hate)
okay, don't let the postgres admin user connect from outside