auth        required      /lib/security/pam_env.so
auth	    sufficient	  /lib/security/pam_x509.so
auth        required      /lib/security/pam_deny.so