Add libpam script go rewrite

Preliminary measurements: now takes 100ms on services (an unloaded machine)
where it used to take ~150-200ms. Remains to be seen how well it works on free.

Needs /etc/security/chroot modifying so that the chroot lives at /jail
rather than /jails/%u.

Also needs a bit of other thought for another day.