daemon: Distinguish "pam module failed" from "authentication failed"
    
    If pam_start() fails, that suggests the configured service
    stack is failing independent of the user account.
    
    This commit exposes that failure as "service unavailable"
    instead of "authentication failed".