IMHO reading the standard. It looks like the EAPOL shouldn't be forwarded because it is intended for link level protection. What would happen if there were two wireless interfaces in the same bridge? If you want implement something use EAPOL, it should probably be done at the 802.11 layer before the bridge module receives it.