Hello there, since the build dep on hardening-wrapper isn't neccessary for pam_mount, I'm wondering why #836635 is "serious" and marked for autoremoval.
BTW: pam_mount 1.16 has just been released to "support building with OpenSSL 1.1.0 and test libressl 2.4.2", which could be good for the auto-openssl transition (#828404). Since pam_mount 1.15 it supports the helper= option so that various debian bugs for pam_mount, even crypto or unmounting related bugs, should be resolved. So by updating to the latest upstream version and removing the build dep pam_mount should be able to stay in Debian. Christian Meyer