PAM faillock works on local users, but NFS-backed home directory latency makes remote users appear to authenticate and then fail session setup

Password checks succeed, yet login still breaks because account and session modules depend on slow remote state.