title: How to disable and enable admin console (admin-listener, port 4848) from the command line
body: <p>I would like to control when and where the admin service is accessible</p>
  
  <p>How do I do one of the following (if possible)</p>
  
  <ol>
  <li><p>Enable the admin console only from localhost (I know about disable-secure-admin, but still I don't want anyone to see the console login page when they add 4848 in the end) 
  I will use SSH tunnle to connect</p></li>
  <li><p>Or, be able to use a certificate, so only certified clients will be able to even see the console</p></li>
  <li><p>Or, be able on demand to start / stop the admin service when needed, not opening it to the outside world (e.g. start stop __asadmin virtual server)</p></li>
  </ol>
  
  <p>Is any of the above possible?</p>