pam-envoy: enable automatic unlocking