I’m becoming increasingly convinced that PAM is far more important than it is usually treated. It seems like more reading on how to leverage PAM to increase security would be wise for any GNU/Linux system administrator. I came across Been Cracked? Just Put PAM On It! and found it to be a good guide.