Thank you for the thorough expalantion and for incorporating some of my suggestions. I can whitelist the PAM module and nss library whenever you want. I don't think any of the issues is a blocker for the whitelisting. So either I whitelist them right away or once you want to actually submit something to Factory. It is up to you. I only want to avoid having a whitelisting for something that never ends up in Factory. Therefore, if it takes more time or you are not sure about it then I'd postpone the whitelisting to a time when the Factory submission is getting closer.