Idea: using google-authenticator libpam

[wyleung]

Adding an extra security layer per login (prevent automated logins using comprimized ssh-keys).

See the lib here:

https://github.com/google/google-authenticator