from /usr/lib/rpm/macros.d/macros.pam:
%_pam_vendordir %{_prefix}/lib/pam.d
this is then... Looks sane.