gensec: Allow login without a PAC by default (bug #9581)