postgresql-client: Only write declared credentials

Prior to this commit, this would write both the admin-<alias> and the <alias>
service keys. Which, for some use cases, is not adapted (giving access on read-only db
for one should not give other credentials for write access).

Related to T2932