Controller-less WLANs

Question:  Is there any license requirement for IAP-VPN (RAPng) deployment on an Aruba Controller?
Environment:  This article applies to all IAP models running OS version 3.0 and above.

Aruba controller counts an IAP forming a VPN tunnel as VPN client and not as an AP. So licenses such as PEFNG, AP capacity and RFProtect are not required. However, we would need a PEFV license in case we want to modify the role in which the IAP fall on the controller.