cbc4cf
#%PAM-1.0
cbc4cf
auth		include		runuser
cbc4cf
session		optional	pam_keyinit.so force revoke
cbc4cf
-session	optional	pam_systemd.so
cbc4cf
session		include		runuser