There's really nothing better than those you mention AFAIK. And the security part of the RDBMS is one that's evolving rapidly, which means that investigating the PG 7.1 or PG 7.2beta (depending on which you're using) directly is probably your best bet.