some tls_eap optimizations