I did a sweep of the entire source tree looking for things that
use getpw*.  Right now, I'm looking at OpenSSH.  It is so convoluted
that it will be difficult to determine if its use of getpw* will
conflict with its use of PAM.  Does somebody else want to look at it?
Should I just change every use of getpw* in the source of sshd to
getpw*_r?  Should we just ignore OpenSSH now that the sweep of all the
PAM modules is done?