Include pam_unix logs but now exclude "411-alert-handler" and "xxx messages suppressed"