Using pam_radius_auth.o, why call pam_sm_chauthtok twice??