> and no replicated data, that could run on a separate (low security) server

> with a more liberal admin policy?

this server would need to be completely separate from the existing Toolserver
infrastructure, which would significantly increase admin workload.  it would
make more sense for it to be run by someone else, unrelated to the Toolserver.
(as if it had its own admins, all we would be doing is providing hosting and
hardware.)