s3-waf: add pam configure checks.