Password protecting shell access
It might be possible by modifying su  source code. You can modify so that some commands require a password such as the shell. Create your own custom su based on the device.