Yeah, probably, but PAM modules have a habit of crashing and can load arbitrary libraries, so for such a big system component I would still keep it isolated. Bu

Yeah, probably, but PAM modules have a habit of crashing and can load arbitrary libraries, so for such a big system component I would still keep it isolated. But if you think you can trust it...