pam: Remove all but one line from pam.d/su.

The session modules seem useless, and the common files only include ldap
and don't know about root, so that only gives warnings when root is
trying to su.

This makes it impossible for non-root users to use su, but that's a
feature.