To prevent a user from shelling out with vi (which is vim on my machines), use the "-Z" option or "rvim" which is the same thing. If your vi is different, run "man vi" to find out how to make it restricted. »