Re: severe deficiencies in our PAM setup
> I assume he's thinking of running it when a package installs itself and
> providing a script for sysadmins so they can update their global configuration
> and rewrite all the pam.d scripts automatically.
No, I don't like non-runtime things. We could just "borrow" CPP's syntax
and implement it in a library in order to not requiere a fork. I could do
that if people like the idea...
CPP syntax is a *very* well known preprocessor syntax, and it could give
much flexibility not only in this case, but also in many other configuration