[options]
NoUpgrade = etc/pam.d/su-l