Multiple Authentication Methods / Storing Connection Strings outside web.config

I have 2 questions:

1) We have an existing website with its own rules for authenitcation for our customers.  We now want to add membership for use with our employees for the CMS section of the site.  Is it possible to have these 2 authentication methods or is there an easy way for us to switch the authentication pieces based on domain (i.e. we have the regular domain and an edit.mysite.com domain)?

 2) Using Membership, the connection strings, role information, etc is stored in the web.config out of the box. This goes against our best practices (mainly for maintenance as the same information is used on 20+ sites, but also for security sake).  We instead like to store this type of information in a Class Library and retrieve it.  Is it possible to pull the configuration settings into our class library and retrieve them programatically instead?

 I appreciate your thoughts,

- JM
...