AVCs seen and password requested anyway when sudoing with pam_ssh_agent_auth enabled

Issue

• Even though pam_ssh_agent_auth has been configured to provide password-less sudo, confined users such as staff_u or sysadm_u are requested to enter their password:

  $ id -Z
  staff_u:staff_r:staff_t:s0-s0:c0.c1023
  $ sudo -i
  [sudo] password for <user>: 
  

• Users mapped to unconfined_u can sudo password-less without issue:

  $ id -Z
  unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
  $ sudo -i
  #