[RHEL/6, RHEL/7] Fix pam_faillock rules recommendations so they wouldn't be thrown out of context

Fixes https://github.com/OpenSCAP/scap-security-guide/issues/302 (see that issue for further details why this change is necessary)