Prefer PAM before Kerberos for authentication (fix misbehave on Darwin)