You are designing a WLAN, and the organization requires 802.1X/EAP for authentication but does not have a Public Key Infrastructure (PKI) and does not plan to deploy one. The network will primarily support Windows clients, Apple phones, and Android phones. What authentication method should you recommend?