add option for internal-only for hdbits provider

closes #4091