Supply username to pam_start so PAM_USER is set. Set PAM_RHOST, standard and some modules expect it.
Send PAM auth request, even when username lookup failes.  Allows modules like pam shield to work properly.
PAM session and credential support