pam_mount: do not re-prompt for password

nixos-rebuild test causes pam_mount to prompt for a password when running with
an encrypted home:

building '/nix/store/p6bflh7n5zy2dql8l45mix9qnzq65hbk-nixos-system-mildred-18.09.git.98592c5da79M.drv'...
activating the configuration...
setting up /etc...
reenter password for pam_mount:
(mount.c:68): Messages from underlying mount program:
(mount.c:72): crypt_activate_by_passphrase: File exists
(pam_mount.c:522): mount of /dev/mapper/vg0-lv_home_peter failed
kbuildsycoca5 running...

This change makes pam_mount not prompt. It still tries to remount (and fails in
the process) but that message can be ignored.

Fixes: #44586

+2 -2
+2 -2
nixos/modules/security/pam.nix
··· 428 428 ${optionalString config.security.pam.enableEcryptfs 429 429 "auth optional ${pkgs.ecryptfs}/lib/security/pam_ecryptfs.so unwrap"} 430 430 ${optionalString cfg.pamMount 431 - "auth optional ${pkgs.pam_mount}/lib/security/pam_mount.so"} 431 + "auth optional ${pkgs.pam_mount}/lib/security/pam_mount.so disable_interactive"} 432 432 ${optionalString cfg.enableKwallet 433 433 ("auth optional ${pkgs.plasma5Packages.kwallet-pam}/lib/security/pam_kwallet5.so" + 434 434 " kwalletd=${pkgs.plasma5Packages.kwallet.bin}/bin/kwalletd5")} ··· 489 489 ${optionalString config.security.pam.enableEcryptfs 490 490 "session optional ${pkgs.ecryptfs}/lib/security/pam_ecryptfs.so"} 491 491 ${optionalString cfg.pamMount 492 - "session optional ${pkgs.pam_mount}/lib/security/pam_mount.so"} 492 + "session optional ${pkgs.pam_mount}/lib/security/pam_mount.so disable_interactive"} 493 493 ${optionalString use_ldap 494 494 "session optional ${pam_ldap}/lib/security/pam_ldap.so"} 495 495 ${optionalString config.services.sssd.enable