Handy for small local installations. Disabled by default because it adds a dependency on the PAM library.