Remove pam.d/sshd, doesn't work properly, user will need to use
"pefs addkey <dir>" when ssh'ing into an encrypted homedir