Can you do anything w/ ksh and .sh_history/command history?
That's already built-in (guess you'd have to work to make
it un-editable) so you'd just have to limit their
access to /bin/ksh. Though ... can they change the
.sh_history path? Are these potentially malevolent
users or just a tracking business?