Hi Matt,From the page you referenced for "authentication_milter", it says that the milter will /verify/; from that, I conclude it won't *sign* the ARC.
As far as the popcon count: as you say, it's only in "experimental", so having a popcon count of 20 even seems *high*.
Regards, Erik.