lock down the shell even more