auth [default=ignore ignore=11 success=11]              pam_localuser.so
auth [default=4 success=ignore]                         pam_succeed_if.so user ingroup jc_net_pin
auth [default=1 success=ignore]                         pam_succeed_if.so user ingroup jc_net_pass
auth [default=die ignore=3 success=1]                   pam_jc_nopki.so applet=-1 net_auth
auth [default=die success=ok]                           pam_jc_nopki.so applet=-1 net_auth
auth [default=die success=5]                            pam_jc_sss.so pwd_group=jc_net_pin use_first_pass
auth [default=1 success=ignore]                         pam_succeed_if.so user ingroup jc_net_pass
auth [default=die success=3]                            pam_jc_sss.so pwd_group=jc_net_pass 
auth [default=die ignore=1 success=ok]                  pam_jc_nopki.so applet=-1 net_auth
auth [default=die success=1]                            pam_sss.so use_first_pass
auth [default=die success=ok]                           pam_sss.so
auth [default=die success=done]                         pam_jc_otp.so