On 2022-03-13 20:35:44 -0400, Tom Lane wrote:
> Andres Freund <andres@anarazel.de> writes:
> > I was thinking that the way to use it would be to specify it as a client
> > option. Like PGOPTIONS='-c ignore_event_trigger=login' psql.
>
> Ugh ... that would allow people (at least superusers) to bypass
> the login trigger at will, which seems to me to break a lot of
> the use-cases for the feature. I supposed we'd want this to be a
> PGC_POSTMASTER setting for security reasons.
Shrug. This doesn't seem to add actual security to me.