EAP/TLS certificate Security question