… or “confine untrusted users to their home directory (and give them no shell access as well)”