Dont rely on PAMAuthenticationViaKbdInt default being 'no'