76235b992b
doesn't solve the problem of root being allowed to log in, but that sort of thing is something PAM should be doing anyway.