@scholar

I intend to do something like that, yes. Feel free to help :)
I have a refactor pending that splits Pam session steps so we can focus on auth.

Hopefully long term we can make something shared for all password prompt usages; but maybe it's on us to prototype something first.