Queue connection based on MAC for hotspot

We have a bunch of hotspots. We have a couple users that come and abuse the usage of our hotspots. Talking to them doesn’t do a thing. Is there a way we can queue them based on Mac address? I see we can do this based on IP address but he could get a different IP next time he comes in so that won’t work.

you may mark packets by ‘src-mac-address’ firewall matcher, and create limiting queue for them

As you have HotSpot, I suppose every client uses username, which could be name or MAC-address.
Perhaps it is better to apply queue per client name or per HotSpot profile.