Manual

68
Message-Authenticator (80)
Is always included in Access-Request. If present in Access-Accept,
Access-Challenge or
Access-reject chilli will validate that the Message-Authenticator is
correct.