Shell access to users

Python jails are possible, I'm sure there are users of those. But create the python bots on your own workstation, then test they work in the jail you create for the users. Jailkit docs have instructions on how to add the needed files to the jail, try to avoid adding python things the bots do not need.
You can then contribute the python jail configuration to ISPConfig project.