cbc4cf
#%PAM-1.0
cbc4cf
auth		include		su
cbc4cf
account		include		su
cbc4cf
password	include		su
cbc4cf
session		optional	pam_keyinit.so force revoke
cbc4cf
session		include		su