Unfortunately we wouldn't be able to do this, if you enable both Radius and MAC auth on a single SSID, the Radius server will only display one server at a time. So for example, if you select Radius Server A, and then enable MAC auth, you will see Radius Server A already selected for the MAC auth portion of the SSID. If you change this over to Radius Server B, and then check your original, non-MAC auth, Radius SSID, you'll see Radius Server B in place.
You could do a Radius SSID along with certification authentication, where the users would be able to enter their Radius credentials, and they would have to have your certificate pre-installed on their client device before they would be able to connect. That way the users are still entering credentials, but you have to pre-approve and pre-set up the devices they are allowed to use.
Does that answer your question?
