#%PAM-1.0

auth       include      system-auth

account    required     pam_nologin.so
account    include      system-auth

password   include      system-auth

session    optional     pam_keyinit.so force revoke
session    include      system-auth
session    required     pam_loginuid.so
