factory: install minimal PAM and nsswitch config