clarification on eap configuration files and certificates