requires mod_auth_pam for authentication