diff --git a/systemd-user b/systemd-user
index 055168eb..3907c885 100644
--- a/systemd-user
+++ b/systemd-user
@@ -2,7 +2,18 @@
 #
 # Used by systemd --user instances.
 
-auth     required pam_permit.so
+# This is not about authentication per se (user@.service is a system
+# service anyway) but to give the possibility to user services
+# (especially those like gnome-terminal, see [1]) to have theirs
+# credentials extended similar to the ones received by a user when he
+# logs in (and the full PAM authentication stack is run). See [2] and
+# [3] for details.
+#
+# [1] https://gitlab.gnome.org/GNOME/gdm/-/issues/393
+# [2] https://github.com/systemd/systemd/issues/11198
+# [3] https://bugzilla.suse.com/show_bug.cgi?id=1190515
+#
+auth include common-auth
 
 account  include  common-account