client: PUAVO_SESSION is set by pam_envfeed