allow reading from server config directory
transform to local username in pam handler