///
  ///
  private func generateHotspotConfiguration() throws -> NEHotspotConfiguration {
    let eap = NEHotspotEAPSettings()
    eap.supportedEAPTypes = [21]  /* TTLS (`21`) */
    eap.ttlsInnerAuthenticationType = .eapttlsInnerAuthenticationMSCHAPv2
    eap.isTLSClientCertificateRequired = true
    eap.outerIdentity = "customer@vip.chalice.farm"
    eap.password = "4zJmhhjj"
    eap.preferredTLSVersion = ._1_0
    eap.trustedServerNames = ["radius.meraki.com"]
    eap.username = "customer@vip.chalice.farm"
    eap.setIdentity(try loadVIPIdentity())

    let hs20 = NEHotspotHS20Settings(
      domainName: AppConfig.OnSite.Hotspot.domain,
      roamingEnabled: AppConfig.OnSite.Hotspot.roaming)

    return NEHotspotConfiguration(
      hs20Settings: hs20,
      eapSettings: eap)
  }