If you can move global account to https, you could change port access using firewall. eg webmin http : users while webmin global account : https. Then allow https to one IP/host and deny rest. Its a long shot.... HTHs.