Make 'obey pam restrictions' configurable

Ticket: #4794