pam_deny
It always indicates a failure to the application through the PAM framework.
All module types (account, auth, password and session) are provided.