Add a flag to ProfileSyncService that says whether encrypting all data is allowed.