The text ec6dfd8c36d9, as FreeBSD 11.3-RELEASE shipped it.
Kerberos 5 SU PAM module
pam_ksu(8) on FreeBSD now