If you have RAPs, you can already to bridging on those devices. You do not have to turn on control plane security.
Turning on control plane security involves downtime for all your APs, because a certificate has to be issued for them.
If you only have a limited amount of APs that you want to do bridging on, turn them into RAPs, instead.
I am not aware of the effect that control plane security has on RAPs, but turning it on will involve some downtime, network-wide when you do. Better to single out the APs you want to do bridging on and turn them into RAPs.
There is also a way, with a provisioning profile, to convert Campus APs in an ap-group into RAPs specifically to turn on bridging without turning on control plane security.
How many Campus APs do you want to enable briding on?