PostgreSQL Foreign Data Wrappers Hide a Second Credential Boundary

How local roles and foreign user mappings create a second authorization identity.