I think I would like to have a set of GUC parameters to control the
location of the server-side SSL files. In a setup that has all the
other configuration files under /etc, the SSL files ought to go there as
well. (For comparison, most email and web servers keep them there.)
Having them in the data directory keeps requiring a bunch of special
treatment in the configuration management set up, and during backup and
recovery. Any concerns about that?