PAM is good stuff. It abstracts the authentication for applications from the backend that will ultimately verify accounts and settings. But what are those pesky brackets doing in that config file. I thought that only required, sufficient and optional were required.