Have you tested that setting shell to nologin works? I'm asking because there are quite a few reported issues with the Centos guide.