A little more specificity with the PAM documentation would help

[bordenc]

From: https://docs.nitrokey.com/nitrokey3/linux/desktop-login.html#modify-the-pluggable-authentication-module-pam , it is a little unclear for newcomers where the new line should be added. The language "add the following lines:" implied, at least for me, adding it to the end of the file. However, the addition needs to go at the top of the file (or, at a minimum, before any auth ... pam_unix.so entries) to have any meaningful effect.

I suggest specifying this in the documentation to save users from having to go through the PAM documentation to figure out the correct configuration.