serverconfig: allow marking handlers as internal, so they're not accessible over HTTP

Change-Id: I37190e90fbc2560c07f742270c827f6025a2fb6f