Create user account with default shell as /bin/noshell (noshell is in debian repository).

When adding login key to authorized_keys file, append these data at the beginning of the line: no-pty,no-X11-forwarding