The text a9a7c0bbd0f4, as FreeBSD 11.1-RELEASE shipped it.
Kerberos 5 SU PAM module
pam_ksu(8) on FreeBSD now