It was a little unclear which password we should specify; it turns out
it's the pgbouncer password, which is used by consul to signal to the
pgbouncer service it should reload.

https://gitlab.com/gitlab-org/build/team-tasks/issues/37