VMAccess extension sets ChallengeResponseAuthentication to a no by default

When trying to update a VM user's login SSH key via a CLI script, it resets the ChallengeResponseAuthentication to a no because it resets the sshd_config from a OS specific default file. This is a problem when updating huge number of VMs in order to rotate the login keys in a defined frequency of rotation. We have to login to every VM and then change the value from a no to a yes if we use the PAM plugin for MFA, Can we either have:
1) An option to disable resetting the ssh_config?
2) An option to override the specific default value of the sshd_config (like ChallengeResponseAuthentication).