Private intranet-level Nuget feed: Windows Integrated Security customization
===

Greeting!  
I'm considering setting up Intranet-level Nuget feed(bunch of teams in my company are supposed to use it).  
I've looked briefly through some tutorials + appropriate chapters in [Pro Nuget][1] book and got some question left so far:  

 1. How to make windows integrated security working on private feed smoothly and customize access rights for private Nuget feed(for instance, grant everyone to get packages but grant pushing only to several domain users/groups); 
 3. How to allow developers to push packages to private feed without having `api key`?
 2. How to save developers from making such silly mistake as pushing package to public feed? Is that enough to not configure `api key` for public feed as default?


Has anyone faced with one of these cases?  Any hints are appreciated. 

Thanks!

  [1]: http://www.amazon.com/NuGet-Professional-Apress-Maarten-Balliauw/dp/1430241918