The title may make my question seem absurd, but, hear me out.
The Overview: I am creating a project whereby I'd like my users to be able to connect to the server they are using to audit its authenticity. The site is related to security, privacy, and encryption and as sensitive of a realm that is, I see no better way to show it's the real deal than to just be 100% transparent.
The Question: Is there a secure way to create an extremely limited user account (cd, ls, and less only) which has a permanent blank password and no ability to escalate permissions? Pretty much the only data that will be on this machine is the base OS and the source code to the product.