If you want to restrict access by location, you could also get a few directional antennae and setup an omni directional fake AP generator {http://www.blackalchemy.to/project/fakeap/]. But I suppose a Net-BSD sniffer in the right place could eventually figure out who is talking to who (whom?).