As far as I can tell, my wireless NICs do not allow bridging to happen alongside WPA encryption. Something about how frames leaving the radio have to have spoofed MACs when they come from the bridge does not work with wpa_supplicant.
I just want a wireless bridge with WPA. I tried this:
<get wlan0 associated w/ encryption>
brctl addbr br0
brctl addif br0 eth0
brctl addif br0 wlan0
<association via wpa_supplicat immediately drops and fails to re-auth>