[Unit]
Description=Wipe PAM timestamps on sleep
Before=hibernate.target hybrid-sleep.target suspend-then-hibernate.target sleep.target
StopWhenUnneeded=true

[Service]
Type=oneshot
RemainAfterExit=yes
Environment="TIMESTAMP_PATH=/var/run/pam_timestamp"

ExecStart=/bin/sh -c 'rm -rf $TIMESTAMP_PATH/*'

[Install]
WantedBy=hibernate.target hybrid-sleep.target suspend-then-hibernate.target sleep.target