A network engineer is securing an access-layer switch that connects to end-user workstations in an IPv6 environment. Recently, a misconfigured user laptop began advertising itself as a default gateway, causing traffic blackholing for other hosts on the VLAN. The engineer needs the most direct First Hop Security feature to prevent unauthorized devices on these host-facing ports from acting as IPv6 routers. Which feature should be applied?