auth_pam_x11: Audit pwbuf. Bail out when receiving a \0.

Document the reasons why we don't endless loop here, as this password
buffer code may otherwise be too hard to follow.