#%PAM-1.0 auth substack common-auth account required pam_nologin.so account include common-account password include common-password session required pam_loginuid.so session optional pam_keyinit.so force revoke session include common-session