cat /usr/share/pam-configs/salt
Name: salt
Default: no
Priority: -1
Session-Type: Additional
Session-Interactive-Only: yes
Session:
        optional                        pam_exec.so /usr/sbin/salt-masterless-login