RO_OK
(*pamh)->pam_inmodule = RO_OK; /* OK to set RO items */
if ((item_type == PAM_SERVICE) && (pamh->pam_inmodule != RO_OK))