new twist on shutting down and restricting ssh users

[dman <dsh8290@rit.edu>]

I want to allow my dad to shut down the router/gateway.  I want to do
this by creating a login name "halt" that simply shuts down.  I did
this by making /sbin/halt the shell.  As I understand it, only root is
allowed to halt a system, so I made halt owned by root:halt with
permissions 4754.  This works, but I am interested in comments on the
pros/cons of this setup.  In addition, I want to disallow loggin in as
'halt' via ssh.  How can I do that?

TIA,
-D

-- 

Folly delights a man who lacks judgement,
but a man of understanding keeps a straight course.
        Proverbs 15:21