pam changes break adding GOA accounts

The pam changes to unlock the login keyring while working well when used on existing systems break on new installs as seen in https://matrix.to/#/!FwbcAdwtvCYkHekZKf:talk.puri.sm/$WuWhRt5D7J_pqUoE_TQ8Ike6yb12HSDtdmLbp7C28z8?via=talk.puri.sm&via=matrix.org&via=librem.one as gnome-keyring daemon spawns a senseless prompt that can't be cancelled (but the credentials do get added).

Since there's no way to add any goa accounts this is rather critical. Worst case we revert the pam change.

/cc @angus.ainslie since this would affect newly flashed devices when the factory floor image gets updated