PAM auth with disabled user

[Paul Moore]

Is it intentional that password auth using PAM continues trying to log
on (giving password 3 prompts) in the case that a user is disabled (so
that pam_account returns an error code).

It can be argued both ways (saying 'you are disabled' is giving out too
much information, making it look like you are entering the wrong
password confuses and frustrates the user)