Add config option to fail deployment if private API is used

This would allow users to have continuous integration jobs check if their app uses a private API by mistake, and have the job fail if it does.

Needed to automate the check that quickstarts only use public API.