never send a CERT payload in EAP