Separate admin modules from frontend

[mat]

For security reasons it would be better if the admin modules (admin, install, plugin, webservice) could be further separated from the frontend (website module). What I have in mind is to have 2 applications which 2 different startup scripts. The benefit would be that the frontend would not need to initialize any admin routes and their corresponding dependencies. Furthermore it would be easier to setup the acls for each application and run them under a different user/domain.