Output of exec module

We are using the exec module [1]: https://networkradius.com/doc/3.0.10/raddb/mods-available/exec.html In some circumstances we will reject a user even though they have authenticated. So we send a return code of 1. But this appears in radius./log as an error. Looking at src/main/exec.c I find these lines: if ((status != 0) || (ret < 0)) { RERROR("Program returned code (%d) and output '%s'", status, answer); so I am guessing this is essentially as designed. Is that right? [1] essentially, registering new devices on the network.