Comment 4 for bug 1887663

additionally: my current fp reader setup in the /etc/pam.d/common-auth is:

# here are the per-package modules (the "Primary" block)
auth [success=2 default=ignore] pam_fprintd.so max_tries=1 timeout=10 # debug
auth [success=1 default=ignore] pam_unix.so nullok_secure try_first_pass