Start a restricted shell