I really like this approach but I would like a little more clarification. I'm not sure I understand the issues with the SSP. I think that you might instead be refering to the SSP being installed on the same web application. Http Modules are deployed per web aplication so if you have a separate web application for your SSP you would simply not install the Http Module there. Would this alleviate the issue?