Hi allen,
well u gata nice suggestion inhere, and this answers MOST of the question been asked on how to control the AP system.
Moreover, if this is done,,,it really gonna be a great thing and also will stop the the missuse of issueing -AP to some users who dosent deserves it.