A network engineer is deploying MAB on access switches for a conference room where multiple non-802.1X devices (badge readers, digital signage, and a shared IP camera) connect through an unmanaged mini-switch behind a single access port. Each device has a unique MAC address and must be individually authenticated and authorized by ISE, with separate sessions maintained per endpoint. Which switchport host mode should the engineer configure to meet this requirement?