A storage administrator is hardening an MDS Fibre Channel fabric. A junior engineer accidentally cabled an unauthorized HBA into interface fc1/12, and it successfully performed FLOGI and began accessing the fabric. The administrator wants to ensure that only pre-approved pWWNs can log in on specific physical ports, and that any unauthorized device attempting FLOGI is automatically rejected without requiring manual zoning changes. Which feature should be implemented to enforce this?