...

$ ln -s bash /bin/rbash
$ echo /bin/rbash >> /etc/shells
$ usermod -s /bin/rbash username

for shell in `</etc/shells` ; do test "$shell" -eq "/bin/rbash" || setfacl -m user:username:--- $shell ; done