diff --git a/sshd.pam b/sshd.pam
index 0f5c061..cea2624 100644
--- a/sshd.pam
+++ b/sshd.pam
@@ -1,9 +1,9 @@
 #%PAM-1.0
-auth	   required	pam_sepermit.so
 auth       substack     password-auth
 auth       include      postlogin
 # Used with polkit to reauthorize users in remote sessions
 -auth      optional     pam_reauthorize.so prepare
+account    required     pam_sepermit.so
 account    required     pam_nologin.so
 account    include      password-auth
 password   include      password-auth