add PAM authorization