pam_env user_readenv option should be honoured for security

[baybal]

LightDM doesn't check whether user_readenv is set in the PAM service. So it will cause a .pam_profile read even, if the sysadmin explicitly disabled it