Port Security and WiNG5 APs

Hello guys, my customer policy requires that port security is enabled on all ports of all switches at all time. How can I install APs in such an environment ? Is tunnelling data to the controller required in this case ? Alternatively, I suppose we can achieve the same think that Port Security does with our AP firewall ?

Thanks for your comments