rlm_eap_tls: authenticate instead of authorize?

Hi all, I notice that when rlm_eap_tls checks the user's certificate, it does so in the authenticate section instead of the authorize section, and in the process none of the fields in the certificate are available to other modules until post_auth. Would there be any ill effects if the rlm_eap_tls certificate parsing was moved from the authenticate section to the authorize section? Regards, Graham --