(1) see "max_connections" parameter in the Hijack FAQ. The real limitation is available memory on the player, which can be adjusted (to the detriment of music read-ahead buffering) using a "reserved" keyword (forgot exact name, see the general Empeg FAQ for that parameter).

(2) see "khttpd_commands" parameter in the Hijack FAQ, as well as the section on "securing" your player on a LAN.

Cheers