remove pam_cgroup stuff
update pam_script_ses_open on config changed
disable mlocate, to avoid it filling the entire root partition
update custard redis relation, so that it won't break on config-changed