Cool idea, but I would have implemented this as a PAM-script rather than as a user profile script.