I actually just noticed that the pam.d/sshd file looks a lot more sane in CentOS4. I'm going to give that a shot.

The documentation for configuring PAM is right on with the format -- no include or optional fields :)