secure user restriction

[Richard Storm]

I am using sftp-server chroot patch:
http://marc.info/?l=openssh-unix-dev&m=116043792120525&w=2

Works fine, except user is able to ssh in box.
I could change users shell to /usr/libexec/sftp-server, but then
chrooting wouldn't work.
What is secure way to accomplish this, so that I could
give friend ssh access, so that he could upload/download stuff, but
not compromise my system or reveal any sensitive information?