require Message-Authenticator attribute only if we have a EAP-Message