should be logged in a postgres table, with old and new values, issuing superuser, timestamp, optional comment
