Given https://www.blastradius.fail/, I'd love to see (at least) client support for RADSEC.
I was able to jam it in by replacing net.Dialer with a tls.Dialer in client.go but that's not a compatible way forward to support both RADIUS over UDP and RADIUS over TLS.