PEAP tunnel data should be parented by the tls_session not the handler

There's no need for explicit free functions