make pam_auth a bit more flexible by assigning different permissions to different users