A PAM module that calls unshare()