Rework pam configs for Ubuntu (and possible Debian)