You got me going in the right direction man, thank you! I'm running
7.2.10 and per this bulletin:
https://help.duo.com/s/article/9012?language=en_USI added this attribute
to radius server config and boom!
[radius_server_auto]force_message_authenticat...