Denylogin is a safe login shell for accounts without login privileges
(e.g. e-mail only accounts).  It has customizable "denial" messages
that can be given to users.  This is also very useful for sites that use
netgroups to restrict who can login to specific machines (e.g. to restrict
access to servers.)