# moved to qubes-core-agent-passwordless-root
/etc/pam.d/su.qubes