The single Postgres setting that almost took down our database