Comment 2 for bug 1067779

> So my proposal incorrect - better add pam_loginuid to ordinary
> sessions and leave special sessions untouched.

Yep. This makes it non-trivial to do centrally; needs to be addressed in the individual services unfortunately.