Comment by isostatic

Modern ssh implementations won't let a user with a shell that isn't in /etc/shells access via ssh.

Clearly you'll only be accepting public key authentication too.