With the object pwTemplateMacAddressLimit a limit can
be configured for the max number of MAC addresses that
will be learned on the SDP Bind (only for spoke SDPs).
When the limit is reached, packets with unknown source
MAC address are forwarded by default. By setting
sdpBindTlsDiscardUnknownSource to 'enabled', packets with
unknown source MAC will be dropped instead.