Changing radius client protocol

Hi guys

I have a Privacyidea with freeradius setup working with totp as expected. my radius client can authenticate just over PAP. Any other protocol I get wrong otp. Since the privacyidea is in the cloud, pap wont be sufficient. any way I can change it to md5-chap/ms-chapv1/ms-chapv2?