Well, that's not someone I would willingly give resources to. But preferences on acquaintances aside, you're still looking at a jailed shell rather than a full-on VPS. General rule of thumb - if they have root, you can't really restrict what they do.