Dan Melomedman wrote:
> Again it's exec(), not fork(). One process only.

Correction. We may need two processes at most. The process 
fork()ing/exec()ing the authenticator, and then wait()ing on it, 
and the process exec()ed by the authenticator if credentials match.