make pam_script optional in sshd pam