That's actually what ended up happening. The AP's kick functionality does NOT properly clear the PMKSA cache entry, as I discovered through empirical testing, and summarily filed a bug report.