enabling the PostgreSQL extension is security threat?