a question about the connection to the server

Hello! If some machine is in the same subnet as the radiusd and the AP, how do I prevent it from sniffing the secret for authentication to the server? Regards Andreas