> access points visible by empty nwid (i don't want to associate with them):

Sorry, this is probably because hidden nwid implementation is vary by AP
vendor.  I don't have test environment now, but try
net80211/ieee80211_input.c rev. 1.8

Atsushi Onoe