Public and private containers

Add a setting to `SyncDescription` to control whether or not the created container is CDN-enabled.