android: Use %any as AAA identity, but disable EAP-only authentication