auth: label any pam_conf_t
    so that objects created in there get the proper type