[CentOS] Ignorant question on pam_shield