Hi Steve,
One option is to use the zone subnet command to specify a host or subnet that can or cannot register.
to allow a subnet to a zone:
gatekeeper
zone subnet myzone 10.2.3.0/24 enable
or to prevent a host from registering a zone:
gatekeeper
no zone subnet myzone 192.168.85.1/32 enable
Michael