SIP: Make classes `sealed` by default

[tarsa]

@odersky

With this revised proposal, what is the role of sealed ?

sealed can be extended as proposed here: Pre-SIP: sealed enumerating allowed sub-types