...
session    required    pam_mkhomedir.so skel=/etc/skel/ umask=0077
session    optional    pam_exec.so /bin/bash  /scripts/user_keygen.sh
...