My next goal is to integrate this with wlancond, probably by using a magic WEP key that will tell it to launch wpa_supplicant. My knowledge of wpa_supplicant is minimal, but I believe that this will allow the use of "ap_scan=0" in the config, letting us bypass all the issues with hidden SSIDs.