@takimata I was able to get this working after installing the full wpad-mbedtls package. I used the configuration from this thread as an example and now have password-based VLANs. Thanks again for clarifying that.
I am wondering tho, will this ever be able to use sae-mixed encryption? I was only able to get it working with psk2, but would love to use sae-mixed if possible.