Seems silly, but can you block clients based on the application name? i.e.if you wanted to block anyone trying to connect with PG Admin III...
-- Wells Oliverwells(dot)oliver(at)gmail(dot)com <wellsoliver(at)gmail(dot)com>