Use pam_succeed_if to make it implicitly ask for the user name and verify that the provided one is correct. This can safely run as user.
So that it's possible also to verify an info text conversation
It makes it cleaner to handle, plus it allows adding more. Also rename the `my-service` to something more self-explanatory.