Remove adduser from shadow
Lock down permissions on sudo, and add secure_path parameter to sudoers