Denying users shell/ssh access.

I've dug through the forums/support site and haven't quite found the right answer to this.

What I want to do is make it so that users don't have any access to the shell (ie can't log in via ssh). I know there are other ways to do it that aren't with virtualmin (like setting the shell to /bin/false), but is there a way to configure a default template so that the virtual server admin account can't log in via ssh? I'd like to be able to set a reseller up, but do not want his accounts to have shell access.

Thanks!
Greg