There was one situation where we would return PAM_USER_UNKNOWN. The case is not really any different from other cases where we are returning PAM_AUTHINFO_UNAVAIL, and this difference causes issues in other components of the stack.
Fix this by switching to PAM_AUTHINFO_UNAVAIL.