When you login to the CLI via a RADIUS or TACACS account and you then use "exec ha manage 1" to manage the subordinate unit you have to re-enter your user credentials.
I remember seeing this in my TAM days. I'll submit a feature request to have the authentication carried over.