Drafted the initial work for "multi-key-fields" support and submitted a patch D44463 <https://reviews.freebsd.org/D44463> for review. This work requires the `LKPI_80211_HW_CRYPTO` preprocessor to be defined. And currently although the HW based AES_CCM unicast key can be set successfully, it looks the key does not work yet for traffic like dhclient, which is my next investigation to work on.
-- Best Regards, Cheng Cui