Playing with PAM is definitely worth-while (and don't forget to have a root shell open the whole time so you can fix it when you break things!) It really drives home exactly what the kernel's view of users is, and what is just conventions in userspace. I think PAM was the last piece of GNU/Linux to transform from magic to understanding for me.