Not in there but you made me remind about:

// Log successful/failed logins to <log_dir>/userlogins or to syslog

That's why I said "something like ...", might have been a bit clearer, of course :-)

-- 
  Hannu Hirvonen (hh@uwasa.fi, http://www.uwasa.fi/~hh/)
  Computer Centre, University of Vaasa, BOX 700, FI-65101 VAASA, Finland