Debian jessie introduced pam-auth-update, which packages call when they have
bits of common PAM configuration.