We don't do the jailed shell bit, but we do use chroot on both FTP and SSH. No sense in allowing users to roam the file system.

And yes, dedicated is the way to go! cool