{% for protocol in authentication.protocols %}
{#   this should be fixed in the CLI by a migrator #}
{%     if protocol == 'chap' %}
auth_chap_md5
{%     elif protocol == 'mschap' %}
auth_mschap_v1
{%     else %}
auth_{{ protocol.replace('-', '_') }}
{%     endif %}
{% endfor %}