#%PAM-1.0
auth sufficient pam_rootok.so
account required pam_permit.so
session optional pam_keyinit.so force revoke