I'm also kinda a fan of a separate endpoint, from also a monitoring/operational perspective -- the two endpoints will have very different performance/volume properties and very different users.