auth: remove references to PAM

We might use PAM, or we might just use POSIX calls.