pam_limits functionality