Hello
I think one restart is acceptable for such feature. I doubt user want often disable-enable checksums. In many cases
checksumswill be enabled one time during all cluster life. We need more downtimes for minor updates (4/year) and
changesin config PGC_POSTMASTER (max_connections or autovacuum workers, for example).
regards, Sergei