Hi,
1) Technically, yes, a user logged into a flash client with your developer
credentials could use AccountManager to create new rooms. You would be
INSANE to publish any such client though. Don't do it, or I'll hack your
account =). The only safe way to create on-the-fly rooms is from a server.
2) I'll let Raff answer this one...
nigel