1) A module could be used to disable/restrict NickServ set password, but be aware users wont like that.
2) You cant currently disable either, but as long as you dont load hs_request, and no oper sets any hosts, HostServ has no use.
3) See example.conf near the bottom, for 2 parameters on how to load modules at startup.