For anyone reading this thread in 2015+, the finished product of the latest conversation here came to life, and is presently being tested by several, and is proving successful.
: Complete back/frontend content solution.
Harden your MODX
site by passwording
your three main folders: core, manager, connectors
and renaming your assets
(thank me later!)
5 ways to sniff / hack
your own sites; even with renamed/hidden folders, burst them all up, to see how secure you are not.