Hi,
In pkgsrc there is security/pam-af which keeps the same sort of information as blacklistd, but using PAM instead of being generic. It is configured using the pam_af_tool which stored the config in the same database.
Wouldn't this reject connections at the same place as connections that are rejected because of the lack of password authentication?
John