Kwallet from tty

how do i unlock kwallet automatically upon login in tty ? (no sddm). i tried to modify /etc/pam.d/login to add these two lines:

auth            optional        pam_kwallet5.so
session         optional        pam_kwallet5.so auto_start force_run

when i login (in tty), i run: startplasma-wayland but i’m still getting asked for the kwallet password to unlock it. what am i missing ?

i add a bit of context, here’s what journalctl finds about kwallet:

$ journalctl -b |grep kwallet
févr. 17 12:32:26 kanzume login[1097]: pam_kwallet5(login:auth): pam_kwallet5: pam_sm_authenticate
févr. 17 12:32:26 kanzume login[1097]: pam_kwallet5(login:setcred): pam_kwallet5: pam_sm_setcred
févr. 17 12:32:26 kanzume audit[1179]: AVC avc:  denied  { getattr } for  pid=1179 comm="login" path="/home/adewart/.local/share/kwalletd/kdewallet.salt" dev="nvme0n1p6" ino=269 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:data_home_t:s0 tclass=file permissive=0
févr. 17 12:32:26 kanzume audit[1179]: AVC avc:  denied  { write } for  pid=1179 comm="login" name="kwalletd" dev="nvme0n1p6" ino=268 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:data_home_t:s0 tclass=dir permissive=0
févr. 17 12:32:26 kanzume audit[1180]: AVC avc:  denied  { getattr } for  pid=1180 comm="login" path="/home/adewart/.local/share/kwalletd/kdewallet.salt" dev="nvme0n1p6" ino=269 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:data_home_t:s0 tclass=file permissive=0
févr. 17 12:32:26 kanzume login[1097]: pam_kwallet5(login:session): pam_kwallet5: pam_sm_open_session
févr. 17 12:32:26 kanzume login[1179]: pam_kwallet5: Couldn't open file: /home/adewart/.local/share/kwalletd/kdewallet.salt because: 13-Permission denied
févr. 17 12:32:26 kanzume login[1097]: pam_kwallet5(login:session): pam_kwallet5: Couldn't create salt file
févr. 17 12:32:26 kanzume login[1180]: pam_kwallet5: Failed to ensure /home/adewart/.local/share/kwalletd/kdewallet.salt looks like a salt file
févr. 17 12:32:26 kanzume login[1097]: pam_kwallet5(login:session): pam_kwallet5: Couldn't read salt file
févr. 17 12:32:26 kanzume login[1097]: pam_kwallet5-kwalletd: Couldn't create or read the salt file
févr. 17 12:32:26 kanzume login[1097]: pam_kwallet5(login:session): pam_kwallet5: Fail into creating the hash
févr. 17 12:32:26 kanzume login[1097]: pam_kwallet5(login:setcred): pam_kwallet5: pam_sm_setcred
févr. 17 12:32:29 kanzume setroubleshoot[1214]: SELinux is preventing login from getattr access on the file /home/adewart/.local/share/kwalletd/kdewallet.salt. For complete SELinux messages run: sealert -l f3d308e0-812a-47c3-a2ae-d12626b233ce
févr. 17 12:32:29 kanzume setroubleshoot[1214]: SELinux is preventing login from getattr access on the file /home/adewart/.local/share/kwalletd/kdewallet.salt.
févr. 17 12:32:29 kanzume setroubleshoot[1214]: SELinux is preventing login from write access on the directory kwalletd. For complete SELinux messages run: sealert -l 6a8a0033-5f9a-4ebf-ad94-47cc0c75835f
févr. 17 12:32:29 kanzume setroubleshoot[1214]: SELinux is preventing login from write access on the directory kwalletd.
                                                 If you believe that login should be allowed write access on the kwalletd directory by default.
févr. 17 12:32:29 kanzume setroubleshoot[1214]: SELinux is preventing login from getattr access on the file /home/adewart/.local/share/kwalletd/kdewallet.salt. For complete SELinux messages run: sealert -l f3d308e0-812a-47c3-a2ae-d12626b233ce
févr. 17 12:32:29 kanzume setroubleshoot[1214]: SELinux is preventing login from getattr access on the file /home/adewart/.local/share/kwalletd/kdewallet.salt.
févr. 17 12:32:33 kanzume systemd[1168]: Started plasma-kwallet-pam.service - Unlock kwallet from pam credentials.
févr. 17 12:32:35 kanzume systemd[1168]: Started dbus-:1.2-org.kde.kwalletd5@0.service.
févr. 17 12:32:36 kanzume kwalletd5[2332]: Application ' "kded5" ' using kwallet without parent window!