pam_duo runs before the environment needed by accept_env_factor is available