auth        substack      password-auth-ac
auth        required      pam_succeed_if.so user != root quiet
auth        optional      pam_gnome_keyring.so

account     required      pam_nologin.so
account     include       password-auth-ac

password    include       password-auth-ac

session     required      pam_loginuid.so
session     optional      pam_console.so
session     optional      pam_keyinit.so force revoke
session     required      pam_namespace.so
session     optional      pam_gnome_keyring.so auto_start
session     include       password-auth-ac
