unless i'm totally missing something (not out of the question), i believe that in the experimental build, i.e., as of 3.37.2 firmware, wpa supplicant is built into the wl.o driver. in other words, you don't need to nas to run a wpa client.
what you do need, as far as i can tell, is the following settings
wl0_mode=wet
wl0_auth_mode=psk
wl0_wpa_psk=<your_preshared_key>
NB: wl0_mode=sta will NOT work. You do not need to have wl0_crypto or wl0_wpa_gtk_rekey set (but wlconf actually resets them to defaults) and, as far as I can tell, it doesn't matter to what you set wl0_wep.
this seems to work on my setup, and seems to also be backed up by my reading of wlconf.c (starting at line 641). anyone else care to test and confirm?