I've built a sandbox that restricts the user to the rbash shell. But what I've found was that