If you got good enough router/access points, you could create separate VLANs for client vs private.

Thinking about it, I might just do that when I get back home :)