Are there any security risks when creating a user(s) with no shell, and no special privileges (using fairly strong passwords)?
- To redirect the attackers attention from "real" users (e.g. real user "smr", fake user "admin")
- Secure logging of attempts to break into the system
- Better distinguishable from login attempts to real accounts
Additional: How to notify an admin of "too many" suspicious attempts / what best to do?