Previous changes broke PG URI password management. (#328)

We want to grab the password and remove it from the connection string so
that logs don't contain it, and we set the password in the environment of
the child processes when running pg_dump etc commands.

Fix the code so that's what actually happens. See #323.