Comment # 1 on bug 1208684 from Matthias Gerstner

The major audit of the module was done in bug 993806 and the PAM module was
not in good shape back then.

But can you please explain what you mean by "make it default"? As security
team we only decide whether a PAM module is allowed into the distribution at
all, not really how and when it is installed and configured. So maybe you need
to involve the package's maintainer rather than us. The package does not seem
to have a dedicated maintainer any more though. Adding Fabian as main
contributer and KDE project maintainer instead.