ikev2: Only request reauth during IKE_AUTH if active reauth is not possible

If we can initiate the reauthentication ourselves, there is no reason to
explicitly request the peer to do so (at basically the same time).

testing/tests/ikev2/reauth-early/description.txt

@@ -1,7 +1,8 @@
 This scenario tests <b>repeated authentication</b> according to RFC 4478.
 The initiator <b>carol</b> sets a large <b>reauth_time=60m</b> but the responder
 <b>moon</b> defining a much shorter <b>reauth_time=30s</b> proposes this
-value via an AUTH_LIFETIME notification to the initiator. Thus the
+value via an AUTH_LIFETIME notification to the initiator as it can't initiate
+the reauthentication itself due to the EAP authentication. Thus the
 IKE reauthentication takes places after less than 30s. A ping from
 <b>carol</b> to client <b>alice</b> hiding in the subnet behind <b>moon</b>
 tests if the CHILD_SA has been recreated under the new IKE_SA.

testing/tests/ikev2/reauth-early/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown
+  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown md5 eap-tls
 }

testing/tests/ikev2/reauth-early/hosts/carol/etc/swanctl/swanctl.conf

@@ -9,12 +9,12 @@ connections {
       over_time = 10s
 
       local {
-         auth = pubkey
+         auth = eap-tls
          certs = carolCert.pem
          id = [email protected]
       }
       remote {
-         auth = pubkey
+         auth = eap-tls
          id = moon.strongswan.org
       }
       children {

testing/tests/ikev2/reauth-early/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown
+  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown md5 eap-tls
 }

testing/tests/ikev2/reauth-early/hosts/moon/etc/swanctl/swanctl.conf

@@ -9,12 +9,12 @@ connections {
       rand_time = 0
 
       local {
-         auth = pubkey
+         auth = eap-tls
          certs = moonCert.pem
          id = moon.strongswan.org
       }
       remote {
-         auth = pubkey
+         auth = eap-tls
       }
       children {
          net {