auth    [success=6 default=ignore]      pam_krb5.so minimum_uid=2500 try_pkinit