[phamilton]

Not sure how robust it would be, but you can set a default shell that would be a simple script requiring log in before launching bash. That would give you both.