ensure postgres user can read ssl files