pam_envoy: add PAM_EXTERN
redo Makefile