Yes, I think I understand and my problem was exactly this: as an "external" client I do not know the session_id nor the handle_id used by the particular publisher (which actually is a publisher only - not a listener).
Without having knowledge about these to IDs, I cannot detach nor unpublish, so my conclusion is that in such environment there are no means to let an "external" client kick a publisher in the videoroom plugin.
Well this is also good information to have.
So I will either ask the browser client for the IDs or update the plugin/extend the API with the option to kick out a publisher (similar as "rtp_forward" message). However, intercepting a browser/publisher-Janus session from
an external "client" (first alt. mentioned) does also not look like a clean solution, but now I know what options I have to consider. Thanks for the clarification and help.
/M