openssh: make pam_systemd really optional this time.