This patch enables read-only filesystems and no-new-privileges for all
postgres databases managed by the zalando postgres operator.