xhost configuration

[Booker]

I'm trying to configure my xhost to be secure.  Every time I start and x
server (startxwin.bat) xhost is configured wide open:

$ xhost
access control disabled, clients can connect from any host
INET:host-1.fakedomain.net
INET:host-1.fakedomain.net
INET:localhost
LOCAL:

I have to always type xhost - so that I can get:
"access control enabled, only authorized clients can connect"

So 2 questions:

1. How can I get xhost by default configured with access control enabled
by default?

2. How can I removed a hostname in xhost that has a "-" in it.?  
In the above example if I do a xhost -host-1.fakedomain.net it doesn't
work.  There are no /etc/X.* files on my machines so I don't know where
to manually delete that entry.  Any suggestions?

Mahalo,
Booker