pam: Add pam_permit to the auth section of chfn.