I highly recommend avoiding PAM if you care about security. Also, was this written because pam_ssh_agent_auth does not support certificates specifically? If so

I highly recommend avoiding PAM if you care about security. Also, was this written because pam_ssh_agent_auth does not support certificates specifically? If so, why wouldn't they just modify the existing module? Another example of "Hey let's re-engineer the wheel for fun" ?