Is there a way I can setup httpd.conf to have AuthPam_enabled off by default without having to make each customer put it in each .htaccess file?

Thanks

No, I think it has to be done on a per-directory or per-virtual site basis.

You could modify the CGI that creates the entries when a new virtual site is added, but that could get overwritten whenever an update comes from Sun.