In eap_peer_tls_process_init, check (and ignore) data->ssl_ctx instead of