If you are worried about someone plugging into an unused port on a switch and gaining access to your network, would it not be better, safer and more manageable to shut the interface? However, physical access is access. They can unplug any in use port and access the network. To do it differently, you would need a NAC.
