add restricted bash