use restricted bash shell