The best solution would be to give him a separate IP on your dedicated box - that way its not associated with you - sign a domain over to him - hell its only $10 - let him have his own DNS info(whois) just in case he does mess up its separate from you.
Im doing this with my two step sons and they are just getting into the biz but it keeps things good on both ends
