Use parseOnly if possible
typo tcFormatCode -> rcFormatCode
Add an optional post-upgrade check to the openssl connection type
Rearrange cabal a bit, perms check for pgpass file

No actual pgpass file parsing yet though