I use Yubikey's PAM module as an extra layer of authentication on my server.
I want to skip this authentication module when a device tries to authenticate using a specific SSH certificate.
I know it's possible to do this for certain IPs/subnets using
access.conf - is there a possibility to filter access by SSH certificate?
Ideally one certificate would skip the extra authentication module, while all others would do the full authentication.