5 kx #%PAM-1.0
5 kx auth include su
5 kx account include su
5 kx password include su
5 kx session optional pam_keyinit.so force revoke
5 kx session include su