I think I finally got the Postgres auth stuff worked around.

Drew wasn't able to connect... as it turns out you can (apparently) only have one ident group for local, and only one per 'type' of connection line in pg_hba.conf.

I changed all the auth lines in pg_ident.conf to belong to a group named 'loc'.