The configuration variable SU_OPTS introduced in version 3.5.26 can be used to mitigate...
With RUN_AS_USER, users without a valid shell cannot be used