#%PAM-1.0
auth       sufficient	pam_rootok.so
account    required	pam_permit.so
session    optional	pam_keyinit.so force revoke