Pax Tharkas
Little did they know, Amazon just dumps this directly into your SSH config rather than your authentication

@jpmens @juzam You're being too kind and protecting the guilty (myself).

It started with the following (me being @mwlucas

Me: “pam_exec is scary, avoid it. Especially with shell scripts.”

Dan: “How about I use pam_exec to call a shell script, but add a call to curl(1)?”

Excuse me. I’ll be in the corner, sobbing piteously for the future of humanity.

see for the origin story.