Add new postgresql::server::ssl_certificate class 

these seem oddly restrictive. maybe we're better off not having the fully qualified path?