There’s a related issue around being about to customize the sshd config file (https://github.com/rancher/os/issues/1039). For your use case though, I think the solution proposed by @stuart is the best choice.
If you’re handy with sed, you can do this in your configuration’s runcmd section. I’m using this, for example, to change the port that sshd listens on: