Your customer is using PSK as their only authentication. They have an industry requirement to move to a stronger solution. Your recommendation

is to move to a certificate-based type of authentication where both the client and server require certificates. Which EAP type would be the best fit?