Moving to EAP-TLS, how to disable other types?

[lookjavi]

I'm switching from using EAP-PEAP authentication to EAP-TLS.

1. Is there a way to disable other authentication types, such as PEAP, TTLS, etc. in the package?

2. If this isn't possible, is there any impact to having FreeRADIUS users with blank passwords? Is there a 'best practice' here?

Thanks!