Works fine with ssh with Tacacs authentication!

That is correct, For all the years ASA dev team would not entertain to add this feature but finally they made the change beginning code 9.2.1 where they introduced the "Auto-enable" command aaa authorization exec { authentication-server | LOCAL } [ ...