modifying job-exec to support general identities