Exactly, you can have multiple IP addresses pointing to one OpenACS instance but overall it looks too difficult to provide an OpenACS only solution to your situation. Admins will need to get their hands dirty.
It would still be interesting to hear from anyone running SSL for multiple domains on one OpenACS instance using subsites.
