idk if the pam module used to be around but i remember building a modified sudo binary to accomplish this on my MBP pro a few years ago.