openssh: make pam_systemd optional.