In your setup, is it possible to do a "separation of concerns" type thing? By this, I mean don't rely on druid settings to failover, but instead, make is so the one host address is all druid knows about while behind the scenes, it's actually multiple postgre servers with something else managing high availability?