linux-pam: uses fork(), needs MMU