Yeah - you cannot shut off access UNLESS you are managing THEIR deployment with Airwave. However, the customer can just default it and provision it themselves if they know what they are doing. IAPs run independently if there is no Airwave or Cloud management