[pam] add faillock and pam_tally2 output

Fixes #351.

Signed-off-by: Bryn M. Reeves <bmr@redhat.com>