Add client security hacks + improve lazy CL init, for time being
add check in case security is not enabled
add basic EAP6 style logging/error handling