Support my work with a contribution.
#%PAM-1.0
auth include su
account include su
password include su
session optional pam_keyinit.so force revoke
session include su