I don't think a subsite admin needs to be so restricted. Why can't I set up a server and charge people for websites which they build themselves by assembling the growing collection of useful packges available for ACS without my other cutomers or whole machine being at risk of attack? There's nothing fundamentally difficult or special about 'mount this package here'...
