man rlm_attr_rewrite
SECTIONS authorization, authentication, postauthentication, preaccounting, accounting, preproxy, postproxy
attr_rewrite rewrite1 { ....}