desired filter. The filter is always execv (2) with the privilege of the calling application
NAME pam_exec