When logging in through xdm, pam_console.so correctly sets the ownership
and perms according to /etc/security/console.perms, but upon logout, the
/var/lock/console.lock and /var/lock/console/username files are not removed
so the next user to login isn't able to get console privs.

However, logging in through a virtual console seems to work correctly.  The
lock files are created upon login, and removed upon logout, so successive
users are able to gain privileges as specified in console.perms.