In su(1), fix option ordering and clarify that the login class specified
must be defined in login.conf.

MFC after:	1 month