A e-mail notification (maybe with an authentication code) when remote shell actions get executed by a user or process. This way if ever a user account gets hacked they are unable to directly execute actions on the system without user interaction.