It's easy enough to fire up a Linux box with freeradius but this is such a resource-unintensive service it would be fantastic if it could be handled directly on MikroTik. I know there's doesn't-support-EAP usermanager but lots of us support lots of types and brands of APs in many scenarios that benefit from WAP-EAP rather than PSK. Every brand of AP I've used supports radius for WPA-EAP.

In my case I use typically TTLS since it doesn't require a client cert.

Cheap plastic will be putting out a debian based embedded router next year so there's your competition.

I know it could be done with MetaRouter but I haven't seen much in the way of MetaRouter images, outside of stock RouterOS images these days and it seems like such a kludge.

I second your request, but I would post it in RouterOS Beta - http://forum.mikrotik.com/viewforum.php?f=1