limit privileges assigned to debian user