PostgreSQL default privileges are confusing until you realise they attach to an owner, not an object.