call (pam_get_authtok() will return the previous token if try_first_pass or use_first_pass is specified). Incidentally fix an ugly bug where the buffer holding the prompt was freed immediately before use, instead of after.
Approved by: re (bmah)
$HOME/.k5login authorization for su(1). Reviewed by: des (earlier version)