It's hard to tell what's going on with ath from the man page or announcements. And looking through the CVS logs in src/sys/dev/ic/ar52* doesn't help. One has to try it. And so far, it doesn't appear to work.
As for authpf, I recently posted a sample configuration:
http://www.daemonforums.org/showthre...3099#post22947