optional_depends linux-pam "YES_PAM" "NO_PAM" \
"use pam for authentication and disable native shadow support"  &&
# only in devel sorcery (?)
if declare -f is_depends_enabled &> /dev/null
then
  # only ask if no pam selected
  if ! is_depends_enabled $SPELL linux-pam
  then
    config_query VLOCK_SUID \
    "Set vlock binary suid root for non-root users and shadow passwords?" n
  fi
else
  # always ask, even if meaningless
  config_query VLOCK_SUID \
  "Set vlock binary suid root for non-root users and shadow passwords (not with pam)?" n
fi
