# yes, we know it's sgid, that's the whole point...
libpam-modules-bin: elevated-privileges 2755 root/shadow [usr/sbin/unix_chkpwd]