i contacted support and they provided me this doc page

https://support.solusvm.com/hc/en-us/articles/360007449180-How-to-modify-first-boot-script-in-the-TDN-KVM-template-in-SolusVM-

so what are the options for the customers like us if we don’t want them to access our server? how do i know if they logged in using a different method other than ssh?

wait, the 3rd command is vi. I mean that’s not an automated script, it should be executed manually, right?

good point, it’s just a test server for now so I’ll try to reinstall OS and check if same commands will show in history