Also, a related best practice is keeping track of all the files that are in home directories of privileged users
pgsql-advocacy by date:
Соглашаюсь с условиями обработки персональных данных