Fix pam-wrapper for close-session with broken PAM implementations

Ubuntu's PAM opens the session as root, but closes it as the user. This
creates problems when pam-wrapper checks if it is running as root, so
drop-privilages is now required when using close-session.