Add support for certificates for repositories

Via /etc/docker-certs you can specify extra root CAs and
custom client certificates/keys for specific hosts.