Back in the day I used libpam-tmpdir for that purpose - it covered SSH and other services that used PAM.