add unconfineduser
auditadm: can change/set other users passwd/finger info
passwd: can read passwd pam config files
passwd: can read pam config lnk files to be able to get to authlogin pam config files