We just deleted the SVI interface, but kept VLAN and have it assigned to SSID. It worked like a charm.
This option wasn't available with AireOS, because WLC was a bridge device, and with this piece of art it actually can do that. I'm happy because this was it is reducing the attack surface and make me sleep for another second better
Thanks