lets use <tt>pam::service</tt> as it is more descriptive than <tt>pam::config</tt> which may confuse folks into thinking you are modifying <tt>/etc/pam.conf</tt>