I would love to se some hardware L2 encryption when:
1. talking to other mikrotik devices (should be simple clickbox and transparent to all other protocols) but ensures no ears dropping on that link.
2. MacSec implementation for inter brand taks. I think this would be a given extension after we have the first.