exec_postauth() in rlm_exec appears to be responsible for fulfilling the Exec-Program attribute However it does not look like it will handle the case where multiple attributes exist. Am I missing something?