Why Postgres needs better connection security defaults