- call the pam_session_open/close from the monitor when privsep is enabled so it is always called as root (patch by Darren Tucker)