Adding a custom module to /etc/pam.d/sudo contents via AirWatch

Since this file is protected by SIP, it can't just be changed by an installer/app without prompting the user. If the user chooses to deny the request, the sudo file won't be updated with a security critical pam module.

I need to insert our custom pam module into /etc/pam.d/sudo without the user being able to deny the operation.

Adding a custom module to /etc/pam.d/sudo contents via AirWatch
 
 
Q