At least for Django, there's no reason your built-in admin has to be on the same site (or /admin). You can just create a new project, add the same apps of your main in addition to the admin app and hook it up to the URL of your choice along with whatever authentication you want (even limit to internal IPs).