No login shell would be helpful. One thing needing another round of thinking is permissions/ownership of files, and processes for an OpenACS installation. I doubt you need a password for the file owner or process owner, I haven't.
