was mentioned on the man page for the underlying CREATE USER command, but it should be explained here too.