You can use StreamNameAlias to hide the URL:
http://community.wowza.com/t/-/47
For recording, you can use “rtp-live-record” stream type. Or, better, use MediaCasterStreamManager, which is good for stopping and starting streams, and you can start recording this way too, choose “rtp-record” from the drop-down when you start a stream:
http://community.wowza.com/t/-/54
You can pass username and password to the encoder in the rtsp url, like this:
rtsp://username:password@[axis-cam-ip]:554/axis-media/media.amp?videocodec=h264&streamprofile=profile2
Richard