What's the general consensus regarding the renaming of the system directory if it resides above root? I was recently updating my default EE install to initially start with the directory above root and thought that it was overkill. It seems to me that if someone discovers the system directory when it's above root you have much bigger problems to worry about. Is renaming the system directory overkill or should I rename both the admin.php file AND the system directory?
We setup a folder called "private_ee" (to compliment "public_html") above the web root which contains directories for snippets, system, templates, and third_party. As you said, if someone gets access above the web root, you've got bigger problems.
In other words, there's no need to rename it for security's sake; the security advantage you obtain is gained by moving it above the web root, not by obscuring the path.