as per https://mywiki.wooledge.org/BashFAQ/001
/usr/share/pam-configs/permission-lockdown-security-misc