make enabling of pam an attribute, default false