Nice.
Would love to see something similar to use for troubleshooting. Have had to use these a few times - not I remember what they actually do:
I have the following saved in a text file:
aaa user delete ?
A.B.C.D Match IP address
all Delete all users
ap-ip-addr Match AP IP address
ap-name Match AP name
mac Match MAC address
name Match user name
role Match role name
show datapath session table
show ap arm history ap-name <apname>
show ap monitor ap-list ap-name <apname>