This enables to use passthru policy within the PAM stack.
A user with a token will be asked for the additional OTP value,
while a user without token can login with a simple password.