It's not possible. But especially for VVIP you should never use a open wifi.
I'll recommend the following:
- Internal AAA with MSCHAPv2 (quick, easy and secure)
- External AAA with MSCHAPv2 (a little bit complex, but with a better management options as internal AAA)
- External AAA with EAP-TLS (complex, because you need a certificate for each device, but most secure solution)