*Wiring the daemon's success state to the OS keyring.* - [ ] **Keyring Injector:** Update `pam_sm_authenticate` to request the unsealed token on success and securely inject it via `pam_set_item(pamh, PAM_AUTHTOK)`. - [ ] **Password Sync:** Export `pam_sm_chauthtok` to intercept UNIX password changes and issue a `RESEAL` command over IPC to keep the TPM blob in sync.
Wiring the daemon's success state to the OS keyring.
pam_sm_authenticateto request the unsealed token on success and securely inject it viapam_set_item(pamh, PAM_AUTHTOK).pam_sm_chauthtokto intercept UNIX password changes and issue aRESEALcommand over IPC to keep the TPM blob in sync.