The new line tries WIRED_MAC_AUTH first (regardless of EAP or not).
So if it is MAC auth we get the role from the DB.