DSA-2530 rssh - shell command injection

Henrik Erkkonen discovered that rssh, a restricted shell for SSH, does
not properly restrict shell access.