Of Headless User Accounts and Restricted Shells