ALTER TABLE security_list_entries DROP CONSTRAINT security_list_entries_subject_type_check;
ALTER TABLE security_list_entries ADD CONSTRAINT security_list_entries_subject_type_check
  CHECK (subject_type IN ('ip','cidr','device','user','user_agent','client_name','client_version'));