I guess the right solution is using an existing restricted shell (eg: rksh). I was just pointing "pwd" isn't a command easy to neutralize. robotronic functions should work though along with rksh which forbids the user to run the "cd" command, something certainly more useful than forbidding "pwd".

"man rksh" for details.