The security documentation available in the official documentation is
rather sparse. Is there a more detailed document I should be aware of?
As an example, I'd like to prevent a a user from being able to get a
list of existing databases. Presumably, I can limit access to various
system catalogs to prevent this sort of thing, but if existing
documentation exists it might prevent me from shooting myself in the
foot too badly.
