[CentOS] OT: Q: Howto implement a monitored Shell for remote logins

I sometimes need to allow sub-contracted admins root ssh access to my
servers. Later, I always wonder what they did during access.

Is there any shell that provides all shell abilities to the remote user
but monitors/emails a designated user each command executed in the shell
terminal and does not allow the user (even root) to modify the bash history file or
similar shell history file, or maybe sending each command by email to a
remote server, so that modifying history becomes out of question?

Hope someone can help.

With regards.
Sanjay.