2 auth substack password-auth
4 account required pam_nologin.so
5 account include password-auth
6 password include password-auth
7 session required pam_loginuid.so
8 session optional pam_keyinit.so force revoke
9 session include password-auth
10 session include postlogin