System administrators should have the ability to switch any public list (virtualshelf) to a private list.
As said on bug 31701, I'd like this to be a distinct permission.