this.protocol.name() returns not "eap-ttls" as what I would expect when "EAP_TTLS" is specified as the client protocol, but "EAP_TTLS". This means that RadiusClient defaults to null as the authenticator, which in turn in the RadiusClient.authenticate() method defaults to PAP authentication.