the current aaa_base package requires a reboot to become effective. That's suboptimal. You're approach will not survive a reboot. That's also suboptimal ;) I'll combine both and submit for this