1It needs the SUID version during runtime, and that can't be in /nix/store/**
2--- a/modules/pam_unix/Makefile.am
3+++ b/modules/pam_unix/Makefile.am
4@@ -21 +21 @@
5- -DCHKPWD_HELPER=\"$(sbindir)/unix_chkpwd\" \
6+ -DCHKPWD_HELPER=\"/run/wrappers/bin/unix_chkpwd\" \