xauth-pam {

    # Whether to load the plugin. Can also be an integer to increase the
    # priority of this plugin.
    load = yes

    # PAM service to be used for authentication.
    # pam_service = login

    # Open/close a PAM session for each active IKE_SA.
    # session = no

    # If an email address is received as an XAuth username, trim it to just the
    # username part.
    # trim_email = yes

}