* Ensure we're compliant with the PAM docs wrt return values.  It's not the
  RFC, but it's something.

* work around pam 0.75 broken pam_set_data module_data_name strdup problem.

* Pickup some config value form krb5.conf [libdefaults] section
