Comment # 3 on bug 1141187 from Thorsten Kukuk

If you need a PAM configuration not supported by pam-config, you need to
replace the symlinks (common-auth,account,...) with your own files and you have
to maintain them yourself, as written in the manual pages. 
As the comment warns: manual editing the common-*-pc files is not supported and
will not be.