Support EBS encryption in BlockDeviceType.

Support an optional configuration of ebs encryption in the
BlockDeviceType (which is used to build a BlockDeviceMapping).

The encrypted flag is optional (defaulting to `None`), as the AWS
API doesn't support any value for this flag for the root device
of a new instance.

Related to: https://github.com/boto/boto/pull/2480