even with a password set, one can connect without (this is a major security issue?)

in docker-entrypoint.sh there is line 252:
``̀`
	printf 'host all all all %s\n' "$POSTGRES_HOST_AUTH_METHOD"
	} >> "$PGDATA/pg_hba.conf"
```
That keeps trust! shoud be:
```
	printf 'local all all %s\n' "$POSTGRES_HOST_AUTH_METHOD"
        printf 'host all all all %s\n' "$POSTGRES_HOST_AUTH_METHOD"
	} > "$PGDATA/pg_hba.conf"
```
I can confirm that it works and am submitting a PR.
