Yes, I could do that but it's hard to get right. I think maybe I should release a SSH server container which has dangerous commands restricted.