Use XAUTH / Mode Config for this connection. This uses PAM for authentication currently, and it not well documented. Use the source :) Acceptable values are yes or no (the default).
