What I used to do earlier was ONLY give SSH access, when a member requested it's use. However, we placed a time limit on it. So the customer had say 24 hours to use it for their purpose. I think most of the time, you do not really require the use of SSH. Practically everything can be done without SSH usage.