build: refuse to build without PAM support if enabled