A PAM module that allows you to require a special group or user to access a service.