set L_WARN to yellow, too
Note that the radsec shared secret is radsec
Allow clients to have "proto = tls".

This means tls is REQUIRED for them.  So if someone accidentally
allows that client for RADIUS/TCP, or RADIUS/TCP, the connection
will not be allowed.