Providing Secure, Isolated Shell Access via CWP

Hi All,
I hope this is the right thread to start this in. I was curious on what the best practice is, via CWP to provide Shell Access to accounts that is isolated to their directory AND Secure.

I have an account I need to run composer on, but I do not want to grant console access to an account and give them free range of the server, and additionally, I don't want them to be able to run anything that would destabilize other sites. How does CWP handle this?

Thoughts?

Hi, you can try to install some "Shell jail"