Output of exec module

[Dom Latter]

We are using the exec module [1]:
https://networkradius.com/doc/3.0.10/raddb/mods-available/exec.html

In some circumstances we will reject a user even though they have
authenticated.  So we send a return code of 1.

But this appears in radius./log as an error.  Looking at src/main/exec.c
I find these lines:

if ((status != 0) || (ret < 0)) {
   RERROR("Program returned code (%d) and output '%s'", status, answer);

so I am guessing this is essentially as designed.  Is that right?

[1] essentially, registering new devices on the network.