So, I figured out how to do the wirless config changes via the command line in here: Wireless whitelist from the command line
I wasn't seeing the changes in the web UI, so I figured out I needed uci commit
after my commands.
I now see the MAC addresses configured for "allow," and the MAC addresses that are on the allow list, but I'm still able to get to the Internet on a device that is not on the allow list.
Any tips on what I should look at to debug this? Is there a command I need to run to force disassociation to all currently connected clients, so they have to reconnect, and those on the allow list won't be allowed back on?