Downstream Knative Serving should support HTTPS route from external access.

Although upstream already supports it, downstream has a   bug  https://jira.coreos.com/browse/SRVKS-200 which was decided not to solve. So, we cannot use upstream's way.

P.S I believe that HTTPS is an essential feature, but opened as Story suggested in SRVKS-200.