- pam_unix: split out passwd change to a new helper binary (#236316) - pam_namespace: add support for temporary logons (#241226)