Minimizing the changes against upstream: the only patch should be to use -u nobody when starting pgbouncer