Alternate server certificate

[Garber, Neal]

> It's automatically added for modules listed in the "authenticate" section.

That's what I thought was going on when I looked in modules.c.  Thanks for the confirmation Alan.  

Also, I submitted a bug report to add debug output if pairmake fails while creating Auth-Type in rlm_eap.c.  Having that message in the debug output explaining why rlm_eap failed would be useful.