{% for protocol in authentication.protocols %}
{#   this should be fixed in the CLI by a migrator #}
{%   if protocol == 'chap' %}
auth_chap_md5
{%   elif protocol == 'mschap' %}
auth_mschap_v1
{%   else %}
auth_{{ protocol.replace('-', '_') }}
{%   endif %}
{% endfor %}