auth        substack      fingerprint-auth-ac
auth        include       postlogin

account     required      pam_nologin.so
account     include       fingerprint-auth-ac

password    include       fingerprint-auth-ac

session     required      pam_loginuid.so
session     optional      pam_console.so
session     optional      pam_keyinit.so force revoke
session     required      pam_namespace.so
session     include       fingerprint-auth-ac
session     include       postlogin
