Feature Request: Deny by Default

I'm not sure if this has been asked (I took a quick look but didn't see anything from the title descriptions) so..

My Eero runs as a gateway for both the wireless and wired networks in my place.  If somebody plugs into my network (physically or because somebody shared a wifi-password), I would like to get them isolated to everything until I come along and approve access to the network, either by clicking "okay" or assigning the device to a profile.