Transfer over (almost) completely to using libpam-sys. This reimplements everything in nonstick on top of the new -sys crate. We don't yet use libpam-sys's helpers for binary message payloads. Soon.

FROM docker.io/debian:stable

RUN apt-get -y update \
    && apt-get -y upgrade \
    && apt-get install -y cargo mercurial wget build-essential \
    && apt-get clean