If the teachers have a set device or set number of devices that they should be using the PPSK credentials on, you could enable MAC binding. This would bind the PPSK credentials to a certain machine (or you can do multiple machines as well) so even if the student does get the credentials and enters them correctly, they would be denied access because the client device wouldn't match the MACs bound to that PPSK. You also don't have to know the MAC addresses of the teachers approved devices before hand, the PPSK will automatically bind to the first device it's used on.
For example, let's say you want the teachers to log in on their school issued laptops and also their personal phones. You can set MAC binding up to allow 2 devices per PPSK credential. Then the teachers would login on their computer and phone, and that would bind the PPSK to their devices only. If a student uses these credentials first, you'd hear from the teacher when they can't log in on their own devices, which would discourage sharing. Does that sound like what you're looking for?
If you can let me know which HiveManager platform you are using, I can give you some detailed instructions on how to set up MAC binding. This guide will walk you through how to determine which HiveManager you are using, for reference: https://thehivecommunity.aerohive.com/s/article/Which-HiveManager-Platform-am-I-using
