make sure we don't call pam_end() with a NULL handle in case start failed