pam: Allow only root to change shells and user info.