pam_cgroup fixes