No suid shells

Make sure no shells have +s
Don't exclude anything in /etc/passwd