The text 3e15e7c04ff5, as FreeBSD 12.1-RELEASE shipped it.
Deny PAM module
pam_deny(8) on FreeBSD now