@mwl@io.mwl.io from a security point, having separate db not listenning on network is appelling.
from a sysadmin point of view, knowing that you can put that jail on another service whitout issue is also appelling...
from a dba/backup point of view it's better and safer to have all in the same jail, less point of backup/monitoring.