Handled, Not Hosted: Administrative Activity Inside a Bulletproof Hoster