D. Create one sub-rule for each EAP type under the default 802.1X authentication rule that points to the appropriate identity store per rule.