1 It needs the SUID version during runtime, and that can't be in /nix/store/**
2 --- a/modules/pam_unix/Makefile.am
3 +++ b/modules/pam_unix/Makefile.am
5 - -DCHKPWD_HELPER=\"$(sbindir)/unix_chkpwd\" \
6 + -DCHKPWD_HELPER=\"/run/wrappers/bin/unix_chkpwd\" \