/bin/false is not security