Describe the bug
When you create a switch with useCoA=Y(defaults) and your switch template has a coa scope, PF should try first to deauthenticate using a CoA-Request message and not a Disconnect-Request message. Currently, PF seems to ignore coa scope.

To Reproduce
Steps to reproduce the behavior: exactly the same as for #5123

Expected behavior
I don't know what should be a correct behavior when you have coaOrDisconnect: maybe first CoA-Request and if it fail try Disconnect-Request.