Added actual PAM module, updated docs, and made a few minor fixes

Once this is merged, I'll be ready to make an alpha release.
'arg + strlen("policy=")' is nicer imho (and the compiler will usually optimize away the call to strlen). Same below.