fix not_if in command that applies auths to user

Allows for more complicated definitions including profiles
and flags. Original egrep was based on a too-coarse
understanding of /etc/user_attr.