if [ -f /usr/lib/security/pam_wheel.so ] && ! grep -q "# pam_wheel.so added" /etc/pam.d/su; then
    echo "auth           sufficient      pam_wheel.so trust use_uid" > /etc/pam.d/su
    echo "# pam_wheel.so added" > /etc/pam.d/su
fi