[PATCH] Avoid allowing negative versions of PAM parameters