Hello, maybe kernel-patch-ctx (together with some user space utilities included in the vserver package) can help. It gives you the possibility to limit the superuser.