[Bug 440437] pam-config: --nullok doesn't work with service modules