Hi Sofia,
For #2 situation you in "guests access" you can set to "allow guests who have the key" and set (type) a text string on "Enrollment key" to be used as a password. This way only those who have the enrollment key will be able to log in as guests.
My two cents.