disable fingerprint and smartcard login add a banner text and logo on login screen
Auto configure PAM with pam-auth-update: - enable ccreds-check ccreds-save - enable krb5