- write out new "wait_for_card" config option if we're forcing smart card
        authentication
    - add "use_uid" option to smart card pam_succeed_if line to work around bug
        where pam_succeed_if checks user information even in cases where the
        conditional doesn't depend on it.
    - remove unimplemented "logout" smart card removal action from settings
    - remove unnecessary "card_only" argument