Dave,
That is exactly right - you understand the architecture well. You would like to get a publicly visible commitment to when we will solve this :-). I will remain tactful that this is indeed in our roadmap for this year. Rest assured, we are aware of the need and it is on our radar.
We do recommend a better solution that you can deploy with Ruckus Cloud today, and get much more than client blocking. Cloudpath Secure Access solution is a fantastic solution for broad level client BYOD, security and management, and highly recommended.
Cheers
Phal
Cloud Product Management