Don Armstrong: > Something like this (untested) When you do test it (-: you will discover the rather drastic side-effect on all of the repeated SSH logins of suddenly running them in a completely different control group with completely different settings. The systemd PAM hook does quite a lot of things. Taking it out does rather more than only the thing that is wanted here.