I had a bit of code cause a segfault in 3.0.0. 

         Post-Auth-Type REJECT {

             attr_filter.access_reject

                  update reply {

                         EAP-Message = "0x04040004"

                         Message-Authenticator =  "%{Message-Authenticator}"

                                                }

                                }

Is there any reason I could not add this to sites-enabled/default?

Here is the entry in syslog:

Feb 21 11:18:59 freeradius1 kernel: [6021244.475983] radiusd[8535]: segfault at 80 ip 0000000000410ad7 sp 00007fff32516300 error 4 in radiusd[400000+57000]

David Peterson