Fix bug where when using a response filter, requests where the response failed the filter were still written to the capture file
Fix invalid assert
Should always set the pointer to NULL to avoid corner case on malloc failure
Allocate SSL session ctx memory under the handler to avoid thread safety issues
Can't use "ok = 1" outside of a module call.

Only modules can have their return codes updated.  Sections can't.
Make client_cert bool everywhere
Should write config value to server_raw first in rlm_couchbase
Formatting
Freeing the handler must be synchronised too
Session serialiser's buffer should not be talloced (alloced and freed in the same call)
Formatting
Add function for allocing fr_tls_server_conf_t
Name destructors correctly, remove unused/useless request_opaque_free destructor
Fixup talloc destructors
PEAP tunnel data should be parented by the tls_session not the handler

There's no need for explicit free functions
Similar fix for EAP-TTLS
Similar fix for EAP-TNC
Similar fix for EAP-PWD
Similar fix for EAP-MSCHAPV2