different EAP methods for different users

Hi, we're currently supporting only PEAP, that is we base our security on passwords. We'd like to introduce higher security for a limited set of users this way: 1. support both PEAP and EAP/TTLS 2. configure freeradius to authenticate these users (stored in a local table) *only* if they use EAP/TTLS. They should *not* be authenticated if they used PEAP. Is this (in particular point 2.) easily achievable? Thank you very much in advance, Stefano