3.9 million PostgreSQL services and the pg_hba line that decides everything

Why first-match host-based authentication rules, not missing features, decide PostgreSQL exposure.