A sparsely documented feature of this function is that it can match the challenge against **several** realms / users credentials. These have to be defined as

modparam("uac","credential","gw_user1:gw_realm1:gw_passwd1")
modparam("uac","credential","gw_user2:gw_realm2:gw_passwd2")
......