I think I'm fine with throwing an error here if the user explicitly asked for the certs to be loaded through sslcert/sslkey, but I don't think it's a good idea to do that if the user just happens to have these files around.  Who knows -- maybe they changed the permissions on purpose to make a libpq application ignore them?