How to setup a single user with almost no rights...