MAC-auth only to AP needs a little guidance.