db-anon-role = "required" # Not the default, but only works with PG* variables, which are not set db-config = false