always encode EAP usernames as ID_KEY_ID