client: use lipam-runtime to apply local login restrictions

This commit makes pam-auth-update to append our login restriction
checker into /etc/pam-d/common-account which is included by
practically all PAM modules. Previously, login restrictions did not
affect ssh or console login.
client: make local access pam_exec check quiet
client: change the PAM module type of lightdm-laptop local access control

Type 'auth' is for authentication, 'account' for access control.