Add SuppressDefaultHostAuthentication option.
Incorporate code review feedback (sealing private classes).