- write out new "wait_for_card" config option if we're forcing smart card
authentication
- add "use_uid" option to smart card pam_succeed_if line to work around bug
where pam_succeed_if checks user information even in cases where the
conditional doesn't depend on it.
- remove unimplemented "logout" smart card removal action from settings
- remove unnecessary "card_only" argument