Add kong.NoDefaultHelp() option

Otherwise an authenticated user can send "hg -h" as command. Since
kong calls Exit() by default for their help this could lead to a DoS attack.

Reviewed at https://reviews.imfreedom.org/r/2420/