refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2 # Need MSCHAP-v2 to initialise encryption key
