Encapsulate bitflags types so that the bitflags crate is not part of the public API

We basically should be using a builder pattern + newtypes here.

Alternately, we can explore doing this "manually" and dropping that crate altogether.