On (V)DSL, they use 802.1X, not sure about their fiber service. That's what forces me to use their "home gateway" (since it auths using the certificate in the device).
As a curiosity thing, have you ever cracked open the device to see what's inside? Maybe JTAG ports on the main board, or even having the cert stored (say) on microSD card? :D