#%PAM-1.0
auth        requisite   pam_nologin.so
auth        substack    common-auth
auth        include     postlogin-auth
account     requisite   pam_nologin.so
account     substack    common-account
account     include     postlogin-account
password    substack    common-password
password    include     postlogin-password
session     required    pam_loginuid.so
session     optional    pam_keyinit.so   force revoke
session     substack    common-session
session     include     postlogin-session
session     optional    pam_motd.so