tac_set_av
int tac_set_av(struct tac_handle *, u_int, const char *);
if (tac_set_av(h, 0, "service=shell") < 0) {