I just offer it if asked. If they don't ask, they probably don't need it and it's a waste. Keeping it to a request basis also makes it easier to track who has shell access. cPanel makes it really easy to provide jailed shells; as long as you don't override this you should be golden. Even a full shell rarely exploits root functions.