Meanwhile, I noticed that /usr/share/doc/libpam-chroot/README.Debian.gz needs to be fixed, too, as it currently says:
| "onerr=" Values can be "succeed" or "fail". The action to take if | the configuration file cannot be opened, the chroot() | fails, or the user does not match any of the expressions | listed in the configuration file. Default is "succeed". -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]