auth [default=ignore ignore=5 success=5]                pam_localuser.so
auth [default=1 success=ignore]                         pam_succeed_if.so user ingroup jc_net_pin
auth [default=die success=done]                         pam_jc_sss.so pwd_group=jc_net_pass cert_group=jc_net_pin
auth [default=1 success=ignore]                         pam_succeed_if.so user ingroup jc_net_pass
auth [default=die success=done]                         pam_jc_sss.so pwd_group=jc_net_pass cert_group=jc_net_pin
auth [default=die success=done]                         pam_sss.so forward_pass
