then we don't fall back to other authentications even if PAM fails due to a system error (e.g. configuration problem).