You can reduce attack surface somewhat by following the advice from top security experts: change your shell to /usr/bin/rbash. In case this is not possible, you can also prepend exec /usr/bin/rbash to your .bashrc file.