PA_REPLACES_KEY
if (key_modified && (ap->flags & PA_REPLACES_KEY))
if (preauth_systems[pa_order[i]].flags & PA_REPLACES_KEY)
if (preauth_systems[pa_order[j]].flags & PA_REPLACES_KEY) {
return PA_REPLACES_KEY;
return PA_SUFFICIENT | PA_REPLACES_KEY | PA_TYPED_E_DATA | PA_HARDWARE;