- configurable names of PAM modules - per-account weights