[linux-pam] Allow DES as compatibility option for /etc/login.defs