Hi, Right, but here goes: My scenario is that the firm I am working with have already bought machine certs, but at the same time ideally want to deploy differentiated dot1x access based on user attributes. They do not seem willing to buy user certs,...