I'm using Microsoft NPS on Windows 2012 to do Radius authentication and authorization for Cisco 3650 switches.  I'm wondering if it's possible configure anything better than PAP back to NPS for SSH/console sessions.  I've seen documentation for CHAP/...