IBM also supports EAP-TLS so they don't need to move off the (insecure) LEAP because Nokia said so. They are already doing it. A number of IBMers have connected their N900's to the IBM corporate network using EAP-TLS... though some people (including me) are having a problem with that too: https://bugs.maemo.org/show_bug.cgi?id=7764