add option to associate public ip with instance

Needed for instances running in an internet-facing subnet in order for them to be accessible without SSH forwarding.