Prevent pam-wrapper from using sudo if called from sudo
Limit PAM session files to interactive sessions only
Add PAM preparation section, including modifying libpam-mount

libpam-mount is modified to only run on interactive sessions only, as per
newer versions of libpam-mount
Set correct permissions on pam-configs
Create /var/log/karoshi during install