Restrict shell