EAP: client certificates and double authentication messages