Which two options are possible for authenticating the clients that do not have an 802, IX supplicant while deploying 802.IX authentication on Cisco Catalyst switches?