#%PAM-1.0
auth        include        runuser
session        optional    pam_keyinit.so force revoke
session        include        runuser