don't fail hard if reauth cred generation fails
[mech_eap.orig] / TODO
1 - integration with initiator-side EAP channel bindings
2 - integration with final supplicant architecture
3 - test Heimdal port