I would like to send otherwise REJECTed users to a "suspended" ip pool and pass them. When things get rejected, it seems to abort processing (e.g. if I stick a perl module after pap, it doesn't get called if pap rejects), and it doesn't look like you can make them OK in the Post-Auth-Type REJECT section. Recommendations?