[lmm]

/bin/nologin exists for this reason - if nothing's supposed to be logging in as that user, surely you want a log of when someone tries!