It should be possible to configure if uploading media should publish items directly or not

Steps to reproduce

When uploading a media item it is Always published given that the user that does this has publishing rights. It should be possible to configure that uploaded items should not be published. This is a feature request but since the uploaded item might reveil information that is not to be public yet (for instance a financial report) we should try to find a solution for this.