@Agiri@masto.ninja i solved this with openwrt (or any other router that allows 2 networks in one radio, or has 2 radios) and having a secondary ssid with no key (or you could use wep i suppose) and protecting it with a mac address whitelist