You *could* try to grab them automatically from different default locations, although of course the tinc VPN client can be configured to use a non-default location. Additionally I think that a user of metasploit who doesn't know where he put his client cert and the server's public key shouldn't be using this module. Therefore I don't recommend grabbing it from somewhere.