2 auth requisite pam_nologin.so
3 auth required pam_env.so
5 auth requisite pam_pkcs11.so wait_for_card card_only
7 auth sufficient pam_succeed_if.so uid >= 1000 quiet
8 auth required pam_deny.so
10 account required pam_unix.so
12 password required pam_pkcs11.so
14 session required pam_loginuid.so
15 -session optional pam_systemd.so
16 session optional pam_keyinit.so revoke
17 session required pam_limits.so
18 session required pam_unix.so