Sending Reply-Message in Access-Reject (PEAP/MSCHAPv2)

[Garber, Neal]

> so, in inner-tunnel post-auth, set "outer.reply" 
> to be whatever you want.. you can then, in the 
> outer layer, query/check or use that reply.

There's an additional round trip after the failure
which is why Phil said it needs to be saved.  I 
had a patch to save/restore it; but, it needs 
rework and I don't have the time to do it now.. :-(