ikev2: Only request reauth during IKE_AUTH if active reauth is not possible

If we can initiate the reauthentication ourselves, there is no reason to
explicitly request the peer to do so (at basically the same time).

testing/tests/ikev2/reauth-early/hosts/carol/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown
+  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown md5 eap-tls
 }

testing/tests/ikev2/reauth-early/hosts/carol/etc/swanctl/swanctl.conf

@@ -9,12 +9,12 @@ connections {
       over_time = 10s
 
       local {
-         auth = pubkey
+         auth = eap-tls
          certs = carolCert.pem
          id = [email protected]
       }
       remote {
-         auth = pubkey
+         auth = eap-tls
          id = moon.strongswan.org
       }
       children {

testing/tests/ikev2/reauth-early/hosts/moon/etc/strongswan.conf

@@ -1,5 +1,5 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
-  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown
+  load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown md5 eap-tls
 }

testing/tests/ikev2/reauth-early/hosts/moon/etc/swanctl/swanctl.conf

@@ -9,12 +9,12 @@ connections {
       rand_time = 0
 
       local {
-         auth = pubkey
+         auth = eap-tls
          certs = moonCert.pem
          id = moon.strongswan.org
       }
       remote {
-         auth = pubkey
+         auth = eap-tls
       }
       children {
          net {