Make "obey pam restrictions" configurable

Ticket: #4794