For some reason "optional" behaves like "required" when there is the only one with the type ("session" in this case).
Ref https://linux.die.net/man/5/pam.d
Fixes alpine-conf#10601 (closed)