use an extension whitelist for PostgreSQL