[megous]

PAM using app can fork a process for this, so it's not too horrible, but it increases complexity.