Revoke Public Database Connect

I'm configuring a multi-tenant PostgreSQL server. When I create a new
database, anyone can connect to it. For me, that is bad.

I run:

REVOKE CONNECT ON DATABASE d FROM public;

Now I'm only able to connect to the database as postgres.

I tired putting the create and revoke in a transaction, but create
database cannot be put in a transaction. How do I create a database so
there is not that nanosecond window where someone could connect to the
database publiclly?

--
Alan Gutierrez - http://twitter.com/bigeasy - http://github.com/bigeasy