Send Access-Reject when the authentication is not handled or the useris not found.
unveil .db is needed. Also move pledge() earlier.
Delete log_info() line for debug.
Set length of MPPE send/recv key.
Add radiusd_file(8) module. It provides authencation by a local file.