auth [success=done default=ignore] pam_exec.so expose_authtok quiet /usr/bin/yk-auth
