account  include  system-login

auth     substack fingerprint-auth
auth     optional pam_gnome_keyring.so

password required pam_deny.so

session  substack system-login
session  optional pam_gnome_keyring.so auto_start