add config for chpasswd to pam.d