I know that currently the main limitation appears to be that you cannot build a bandwidth management queue based on a MAC address. This would help tremendously for authenticating wireless clients and assigning so much bandwidth to their radio, compared to DHCP authentication. Since we are using a combination of other WiFi radios to connect end users, this would help us out a lot.

Is this something that can be considered? Or is it already there and I am just missing it?

If you aren't using Mikrotik CPE's then you can only limit the customers download speed using this method..

You will need to turn on Radius under the wireless security profile..

# Ascend-Data-Rate - tx/rx data rate limitation if multiple attributes are provided, first limits tx data rate, second - rx data rate. If used together with Ascend-Xmit-Rate, specifies rx rate. 0 if unlimited. Ignored if Rate-Limit attribute is present
# Ascend-Xmit-Rate - tx data rate limitation. It may be used to specify tx limit only instead of sending two sequental Ascend-Data-Rate attributes (in that case Ascend-Data-Rate will specify the receive rate). 0 if unlimited. Ignored if Rate-Limit attribute is present

-Gerard