diff --git a/autotests/misc/secrets/eap-user.text b/autotests/misc/secrets/eap-user.text
index 6f64b2f8..a34726d4 100644
--- a/autotests/misc/secrets/eap-user.text
+++ b/autotests/misc/secrets/eap-user.text
@@ -20,3 +20,8 @@
 "ttls-mschapv2-phase2@example.com"	TTLS-MSCHAPV2	"Password" [2]
 "ttls-pap-phase2@example.com"		TTLS-PAP	"Password" [2]
 "112345678@phonesim.org"		SIM [2]
+
+# TODO: Hostapd is broken with phase1 lookups for reauthentication.
+# Allowing a wildcard phase1 for PEAP/TTLS is a stop gap until
+# hostapd is actually fixed.
+*					PEAP,TTLS