The text ddd947cbbc45, as FreeBSD 12.0-RELEASE shipped it.
Deny PAM module
pam_deny(8) on FreeBSD now