libeap: ignore TLS errors before any TLS calls