Add initial support for private datasets

This feature will be optional and default to off. This issue will be used to add the initial database schema changes needed, as well as the admin interface to change the setting. The front-end effect and related permission checks will be handled in a forthcoming ticket ones more of the user/role enhancements that are coming are completed