I'm looking to publish an SSID from another organisation across our APs. Normally I would do this with a mobility tunnel between both WLCs but it has been suggested that it would be more secure to have an additional WLC acting as an anchor in our DMZ...