%_pam_libdir     /%{_libdir}
%_pam_moduledir  /%{_lib}/security
%_pam_secconfdir /%{_sysconfdir}/security
%_pam_confdir    /%{_sysconfdir}/pam.d
%_pam_vendordir  /%{_sysconfdir}/pam.d
# legacy, to be retired
%_pamdir         /%{_pam_moduledir}