Yes, to both. Users can post "private" comments that do not appear on the site (and even the admin can't change this status!) and you can set comments to moderated. See the options.
Tere is no direct support for this, but it could easily be coded in your theme. Simply add if (zp_loggedin()) { }
around the code that prints the comment form.