We only allow ttyd not ssh, so users only have access to their individual containers and isolated from the host. But inside the container they can do whatever they'd want. There are also caps on CPUs and resource and PID limits so as to avoid noisy neighbor situations