client/pam: do not restrict users if local configuration allow_logins_for is missing