arm-packager hosts have custom PAM config to allow anyone in "packager" group to use mock (and fedpkg mockbuild) without adding themselves to mock group (which would need to be done every time arm-packager machines are reinstalled).

Current PAM config is not working as intended - it asks for password before checking packager group membership. Attached patch fixes that by moving checks to the beginning of PAM conf file.