#%PAM-1.0
auth       sufficient    pam_rootok.so
auth       required    pam_console.so
account    required    pam_permit.so
session    optional    pam_keyinit.so force revoke