PAM_SUFFICIENT
if (flag & PAM_SUFFICIENT)
(*pam)->pam_flag = PAM_SUFFICIENT;
#define PAM_SUFFI_BIND (PAM_SUFFICIENT | PAM_BINDING)