However, when you are creating users you can simply turn-off their SU priviledges (at least in Mandrake 10 expert mode) so it is no a security worry you can simply turn off the su privledges and not worry about an "su" command from a user to the root.
- Adiz
P.S. - I am sure everyone knows ^ but I thought I would say it.