Thanks, looks good.

I'm a bit surprised how fast your patch was accepted upstream (especially since
the unix_chkpwd profile isn't upstream yet). I somehow foresee another MR
upstream, which might also move some of your additions to
abstractions/authentification.