Update pam rules for OSX 10.8, thanks to Martin Cheatie