One of the possibilities for controlling the BYOD world might be to require the registration of the MAC for each device they will allow to connect, and include the MAC of the GS devices they send out.