fix some whitespace issues in /etc/pam.d/sshd

NEWS

@@ -3,7 +3,8 @@ unreleased (207x-xx-xx)
     [ssh] Change interface parameter. The parameter
     base::ssh::extra_gssapi_only_users has been renamed to
     base::ssh::extra_skip_duo_users to more accurately reflect what this
-    parameter does. [adamhl]
+    parameter does. Also, fix some whitespace messiness in
+    /etc/pam.d/sshd [adamhl]
 
 release/005.010 (2017-10-02)
 

templates/ssh/etc/pam.d/sshd.erb

@@ -9,16 +9,16 @@
 #    credential), then "jump over" the pam_duo module to step 3. If not,
 #    go to the next module in the stack (2).
 # 2. If the user is _not_ root, require Duo.
-<% if @pam_afs %>
-# 3. Set up the AFS session and then, whether the AFS sesssion setup works
-#    or not, quit the pam stack
-<% end %>
+<%- if @pam_afs -%>
+# 3. Set up the AFS session and then, whether the AFS session setup works
+#    or not, quit the pam stack.
+<%- end -%>
 
 auth    [success=1 default=ignore]  pam_succeed_if.so uid eq 0
 auth    required                    pam_duo.so conf=/etc/security/pam_duo_ssh.conf
-<% if @pam_afs %>
+<%- if @pam_afs -%>
 auth    [success=done default=die]  pam_afs_session.so
-<% end %>
+<%- end -%>
 
 ##############################################################################
 # account