I use the RB4011 and am also looking forward to something like wpa_supplicant working. You can see my current work around at the moment here. Only recently has MikroTik announced support for something that might allow us to host our own certificates. It is not ready for use yet.