pkcs11 private key for EAP-TLS (inbuilt RADIUS)

[tom]

Hello,

I see some code in tls_connection_set_params that checks if the
private key starts with a pkcs11: and then tries to load the private
key from the engine.

however if i specify a private _key as:

private_key=pkcs11:model=ATECC608A;manufacturer=Microchip%20Technology%20Inc;serial=238785485C70EF01;token=00ABC;object=device;type=private

it fails because it is expecting a file in this location inside
tls_global_private_key

How can I specify a pkcs11 private key to be used for a EAP-TLS AP connection ?

Or am I reading the code wrong and is the tls_connection_set_paramter
only used inside the supplicant side ?

Thanks,
Tom