* postgresql_membership: add trust_input parameter * add changelog fragment * add session_role to check