In that case, I'd create a second wireless network that doesn't have internet access to keep it all in-house under my control.