I found a sollution. I just disable su and sudo. with a startup script so the users of my kiosk can no tgo in te root

but thanks for the effort mcreel