diff --git a/pkg/de-p1st-pam/PKGBUILD b/pkg/de-p1st-pam/PKGBUILD
index b1e58b6..4bcf8d9 100644
--- a/pkg/de-p1st-pam/PKGBUILD
+++ b/pkg/de-p1st-pam/PKGBUILD
@@ -2,7 +2,7 @@
 _pkgname=pam
 _reponame=arch
 pkgname="de-p1st-$_pkgname"
-pkgver=0.0.2
+pkgver=0.0.3
 pkgrel=1
 pkgdesc="PAM configuration"
 arch=('any')
diff --git a/pkg/de-p1st-pam/system-login.holoscript b/pkg/de-p1st-pam/system-login.holoscript
index 23c7667..2c1d4bb 100644
--- a/pkg/de-p1st-pam/system-login.holoscript
+++ b/pkg/de-p1st-pam/system-login.holoscript
@@ -2,8 +2,11 @@
 # stdin: default config
 # stdout: modified config
 set -e
-cat
 
-# Enforce a delay after a failed login attempt
+# Enforce a 10s delay after a failed login attempt
 # - https://wiki.archlinux.org/title/Security#Enforce_a_delay_after_a_failed_login_attempt
+# - Has to be the first line of the file!
+#   - https://askubuntu.com/a/877390
 echo 'auth optional pam_faildelay.so delay=10000000'
+
+cat