If you only have WPA3-capable devices on your network, setting encryption=sae is fine. I have to support WPA3 incapable devices and thus need to use the sae-mix

If you only have WPA3-capable devices on your network, setting encryption=sae is fine. I have to support WPA3 incapable devices and thus need to use the sae-mixed option (also the wpa_supplicant patch I use requires wpa2-psk support).