The use of pullbundles is already protected: they are only used
when a pullbundles.manifest file is created on the server.

Having an additional flag doesn't really make sense
and can confuse users (as indicated in the mercurial mailing list
on the topic "Can't get pull-bundles working").