The feature is controlled by the --delete command-line option. This
comes with a small refactoring of sync.go to simplify passing all
those options around.

Also moves the PGP/MIME encryption to a command-line option, it's
simpler than overloading the destination spec just for this.