nixos/pam: make pam_loginuid optional if in container

This is needed if `audit_control` is not dropped in container, like in `libcontainer` in `docker`.