Clean up treatment of visibility default

Previously, a combination of special cases handled the default
visibility of fields and the overriding pragmas. Now, everything is
assumed to be confidential unless annotated otherwise. The pragmas
create the necessary annotations; no other annotation are created.