2) you can set PB power but you will have a whole different set of commands, I would just use a config as in above.
3) in your configuration for the server (non pb) change:
// Player slots setup
// Number of private player slots, maxclients - privateclients = public slots
set sv_privateclients "1"
then
change this line to what ever you want your password to be
set sv_privatePassword "passhere" // Private slots, non-public slots
when you join your server you will need to enter your password and you will have you own slot
4) team spectate I believe is
set scr_game_spectatetype "1"