Re: severe deficiencies in our PAM setup
> > CPP syntax is a *very* well known preprocessor syntax, and it could give
> > much flexibility not only in this case, but also in many other configuration
> > files...
> imho, m4 would be better if you want to do something like this. cpp has
> a big problem for shell-type config files--it ain't real happy with # as
> a comment character.
Uh? Here '#' is a perfect comment character for bash...
Any of them would be fine, CPP's syntax is much more known than m4's,