Comment 1 for bug 1893225

pg_hba.conf should contain the egress addresses of the clients, taken from the relation. It is quite possible that subordinates do not supply this information (since they are cohosted), and the PostgreSQL charm needs to cope with that.