This read-create INTEGER specifies the credential type, such as sim, usim, nfc, or hwToken, used when tunneled EAP credential authentication is chosen for a realm; it is reserved when another authentication type applies, and the object is noted as superseded by cLHotspotEAPAuthTable. It lets an admin declare, in legacy configurations, what credential type is expected inside a tunneled EAP exchange, distinct from the non-tunneled credential type object. For example, a realm using tunneled EAP with USIM-based inner credentials would have this object set to usim.