to unveil. Unfortunately the auth subsystem uses _PATH_AUTHPROG =
"/usr/libexec/auth/login_", which it auth-program is appended to -- a
rather gross idea which now shows lack of wisdom.

pwd_gensalt origins, but a string argument works equally work and is more
friendly to consumers beyond local user accounts.
ok deraadt

login_cap_t lives and i don't want to forward declare it in unistd.h

FreeBSD's example, a '~' in an environment variable is replaced
with the user's homedir.  A '$' is replaced by the user's login
name.  Both can be escaped with a backslash to get the literal char.
OK deraadt@

u_char -> unsigned char
u_short -> unsigned short
u_long -> unsigned long
u_int -> unsigned int
okay millert@

If there is no login.conf or it is corrupt we don't want to make
any assumptions about kerberos.  By request of deraadt@

decriptor -> descriptor
authentciated -> authenticated
transmition -> transmission

the login_* helper programs and other support will be committed in the
near future.

bsd_auth.h when BSD authentication is committed.

which will come later.  At this stage it is primarily used for setting
resource limits.