pam_script_ses_close should exist outside the basejail