Add classifier that flags suspect hostile if not on authorized MAC address list