Another attempt with environment to 'on_update.sh'.

manifests/auth.pp

@@ -141,7 +141,8 @@ class aes::auth (
     user        => $auth_user,
     group       => $auth_group,
     path        => $auth_home,
-    command     => "/bin/bash -l $auth_home/on_update.sh",
+    command     => "$auth_home/on_update.sh",
+    environment => [ "HOME=$auth_home", "PATH=/bin:/usr/bin" ],
     refreshonly => true,
     require     => File["${auth_home}/on_update.sh"],
     notify      => Service[$auth_service],