What this PR does / why we need it:

• [bugfix] libcurl->set_user_passwd(...) may cause basic and bearer auth coexist when the registry's authentication domain name is the same as the registry's domain name (e.g. hub.docker.com/auth/...)
• disable huge page
• cmake 3.15 -> 3.14
• [feat] supports SSL/TLS client certs
• [feat] overlaybd-apply: streaming download and apply
• [feat] overlaybd-commit: streaming zfile compress and upload. This is unavailable with option -t because it only supports write-in-sequence, but we have to overwrite the tar header.

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Please check the following list:

• Does the affected code have corresponding tests, e.g. unit test, E2E test?
• Does this change require a documentation update?
• Does this introduce breaking changes that would require an announcement or bumping the major version?
• Do all new files have an appropriate license header?