I do belive that WLC version 5.2 (and 5.1 if I remember correct) supports 802.1x on AP level and I think the 1230 supports it also, which enables you to implement 802.1x in your entire network and not worring about anyone unplughing a ap or host and gain unauthorized access to your network. This would also negate the MAC address control that you manually are doing and not limiting anyone to a certain port in a certain switch as long as they have the right credentials.
If you dont want to implement 802.1x on the entire network you can just do it on the ports connecting the APs.