I tried to call wpa_cli from a command-line (while connected via SSH over different Wifi), but those records get erased when reconnecting.
Then I tried to to call wpa_cli commands after boot from /etc/rcS.d, which resulted in brick
I had to recover using MfgTool, DIAG mode, removing the culprint. I don't know what to try now. I don't understand why they added WPA EAP to K5 with new firmware but not to K4 :-(