I thought you could only do this at initdb time, but my notes say otherwise. shrug
New in PG12 - https://blog.crunchydata.com/blog/fun-with-pg_checksums
systemctl stop postgresql /usr/lib/postgresql/12/bin/pg_checksums --enable --progress /var/lib/postgresql/12/main systemctl start postgresql