I'm on Sierra and haven't been able to reproduce. But does anyone know if it respects pam.d "nullok" and I could just delete that option? /etc/pam.d$ grep

I'm on Sierra and haven't been able to reproduce. But does anyone know if it respects pam.d "nullok" and I could just delete that option? /etc/pam.d$ grep -RI nullok /etc/pam.d /etc/pam.d/authorization:auth required pam_opendirectory.so use_first_pass nullok /etc/pam.d/checkpw:auth required pam_opendirectory.so use_first_pass nullok /etc/pam.d/screensaver:auth required pam_opendirectory.so use_first_pass nullok