Users can ssh but the server admin can limit which commands they're able to run by setting a different shell command, e.g. https://www.linuxshelltips.com/restri

Users can ssh but the server admin can limit which commands they're able to run by setting a different shell command, e.g. https://www.linuxshelltips.com/restrict-ssh-user-commands/ https://www.linuxshelltips.com/restrict-ssh-user-commands/ So you could instruct users to run "ssh me@cli-server.internal 'cli-command --param1 --param2'" without them having extra access to the server. That said even in school it was a fun game trying to get around such limitations, e.g. trying to crash the script to get shell access.