Postgres Revoke Execute Server Program Privilege

Revokes the pg_execute_server_program privilege from the postgres role, removing its ability to execute external system commands via features such as COPY FROM PROGRAM. In a honeypot context, this primitive typically indicates an attempt to alter the server’s security posture after exploitation—either to prevent competing attackers from executing commands, to reduce detection surface after deploying a payload, or as a misguided hardening step performed by automation that previously relied on this capability.