(I didn't try whether it still works on 4.0. Would be nice if someone did it.) -supply an example pam.conf file -slow down to avoid abuse, better cleanup in error cases, more paranoia thanks to Joerg for suggestions
database, for use by unprivileged users to verify their own password (in particular for screen savers) thanks to many people for comments