It's very naive to think that you can protect a box from somebody with a local shell. Never worked.