illegal to set anything to null with pam_set_item