> And how does your if statement look like? It should be something like:

Looks pretty much exactly like Ana's email except I've substituted 'your' and 'realm'

if ("%{Realm}" == /your\.realm$/) {
   update control {
   Auth-Type = Reject
   }

}