Allocate SSL session ctx memory under the handler to avoid thread safety issues
Can't use "ok = 1" outside of a module call.

Only modules can have their return codes updated.  Sections can't.
Make client_cert bool everywhere
Should write config value to server_raw first in rlm_couchbase
Formatting
Freeing the handler must be synchronised too
Session serialiser's buffer should not be talloced (alloced and freed in the same call)
Formatting
Add function for allocing fr_tls_server_conf_t
Name destructors correctly, remove unused/useless request_opaque_free destructor
Fixup talloc destructors
PEAP tunnel data should be parented by the tls_session not the handler

There's no need for explicit free functions
Similar fix for EAP-TTLS
Similar fix for EAP-TNC
Similar fix for EAP-PWD
Similar fix for EAP-MSCHAPV2
Cleanup IKEv2 code so it builds again