their GUCs. In passing, noted that the pg_hba options for krb5 authentication weren't listed at all - so add this.